← Database

CVE-2022-28606

CRITICAL CVSS: 9.8 Published: 2022-05-05 Modified: 2026-06-17

Description

An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server.

Affected Platforms

Bosscms Bosscms

Weakness Type

CWE-434

References