← Database

CVE-2022-36749

CRITICAL CVSS: 9.8 Published: 2022-08-30 Modified: 2026-06-17

Description

RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file.

Affected Platforms

Sourcefabric Rpi-Jukebox-Rfid

Weakness Type

CWE-78

References