cbcvebase.

Ec-Cube Co Ltd Product Image Bulk Upload Plugin vulnerabilities

1 known vulnerability affecting ec-cube_co_ltd/product_image_bulk_upload_plugin.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-37346P2CRITICALCVSS 9.8v1.0.0 and 4.1.02022-09-27
CVE-2022-37346 [CRITICAL] CWE-434 CVE-2022-37346: EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verificat EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability when uploading files. Exploiting this vulnerability allows a remote unauthenticated attacker to upload arbitrary files other than image files. If a user with an administrative privilege of EC-CUBE where the vulnerable plugin is ins
nvd
Ec-Cube Co Ltd Product Image Bulk Upload Plugin vulnerabilities | cvebase