Critical severity9.8NVD Advisory· Published Jan 30, 2023· Updated Jun 17, 2026

CVE-2022-48006

Description

An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

taocms/taocmsdescription
Taocms/taocmsllm-fuzzy
Range: =3.0.2
Taogo/Taocmsllm-fuzzy
Range: =3.0.2

Patches

Vulnerability mechanics

References

github.com/taogogo/taocms/issues/35nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000