CVE-2022-31854

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• CodoForum v5.1 - Remote Code Execution (RCE)2022-07-21 · webapps · php

Impact

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.html
• https://codoforum.com
• https://github.com/Vikaran101/CVE-2022-31854/blob/main/exploit.py
• https://vikaran101.medium.com/codoforum-v5-1-authenticated-rce-my-first-cve-f49e19b8bc
• http://packetstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.html
• https://codoforum.com
• https://github.com/Vikaran101/CVE-2022-31854/blob/main/exploit.py
• https://vikaran101.medium.com/codoforum-v5-1-authenticated-rce-my-first-cve-f49e19b8bc