critical9.8
CVE-2022-42458
Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to uplo…
Impact
Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shift-Tech | Bingo\!Cms | through 1.7.4.1 |