high8.8
CVE-2022-46610
72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function.
Impact
72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 72crm | Wukong Crm | Version 9.0 |