critical9.8
CVE-2022-36262
An issue was discovered in taocms 3.0.2.
Impact
An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Taogogo | Taocms | Version 3.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/taogogo/taocms
- https://github.com/taogogo/taocms/issues/34
- https://github.com/taogogo/taocms/issues/34?by=xboy%28topsec%29
- https://github.com/taogogo/taocms
- https://github.com/taogogo/taocms/issues/34
- https://github.com/taogogo/taocms/issues/34?by=xboy%28topsec%29