← Database

CVE-2022-35426

CRITICAL CVSS: 9.8 Published: 2022-08-10 Modified: 2026-06-17

Description

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

Affected Platforms

Ucms Project Ucms

Weakness Type

CWE-434

References