CVE-2022-37299

published 2022-09-09

CVE-2022-37299: An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via…

Priority P2 72 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

ITW EXPLOIT VulnCheck KEV

An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php

Affected

1 ranges

Vendor	Product	Version range	Fixed in
shirne_cms_project	shirne_cms	—	—

Detection & IOCs extracted from sources · hover to see the quote

path /static/ueditor/php/controller.php↗

url /static/ueditor/php/controller.php?action=proxy&remote=php://filter/convert.base64-encode/resource=/etc/passwd&maxwidth=-1&referer=test

• → Exploit requests target the 'action=proxy' parameter of controller.php with a php://filter wrapper to base64-encode arbitrary file contents; look for this pattern in HTTP GET requests to /static/ueditor/php/controller.php
• → Successful exploitation returns HTTP 200 with Content-Type 'image/png' in the response header and base64-encoded file content (e.g., 'cm9vd' for /etc/passwd root entry) in the response body

• · The LFI payload uses the php://filter stream wrapper with base64 encoding; detection rules must account for URL-encoded variants of 'php://filter/convert.base64-encode/resource=' in query parameters

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

vulncheck 6.5 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22