Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2022-40721: Arbitrary file upload vulnerability in php uploader
CVE-2022-40721 · published 4 years ago
Summary
Arbitrary file upload vulnerability in php uploader
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| creativedream_file_uploader_project | creativedream_file_uploader |
0.3 cpe:2.3:a:creativedream_file_uploader_project:creativedream_file_uploader:0.3:*:*:*:*:*:*:* |
Original advisory text
Arbitrary file upload vulnerability in php uploader
Arbitrary file upload vulnerability in php uploader
References
- http://www.openwall.com/lists/oss-security/2022/10/03/3 Exploit Issue Tracking Mailing List Third Party Advisory
- http://www.vapidlabs.com/advisory.php?v=216 Exploit Third Party Advisory
- https://github.com/CreativeDream/php-uploader/issues/23%2C
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-434Unrestricted File Upload
Timeline
Published3 Oct 2022
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2022-40721 · NVD
Track software like this
Free during beta