← All advisories

Critical severity9.8NVD Advisory· Published Aug 10, 2022· Updated Jun 17, 2026

CVE-2022-35426

CVE-2022-35426

Description

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

Affected products

3

Ucms Project/Ucms
cpe:2.3:a:ucms_project:ucms:1.6:*:*:*:*:*:*:*
Ucms/Ucmscpe-rescue
Cc 225/ucmsllm-create
Range: =1.6

Patches

Vulnerability mechanics

References

1

github.com/cc-225/ucms_v1.6/issues/1nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.