← Database

CVE-2022-32409

CRITICAL CVSS: 9.8 Published: 2022-07-14 Modified: 2026-06-17

Description

A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute arbitrary PHP code via a crafted HTTP request.

Affected Platforms

Softwarepublico I3Geo

Weakness Type

CWE-22

References