CVE-2022-29347

CriticalCVSS 9.8

Published: 04/05/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.69%

74th percentile - higher than 74% of all known CVEs

Summary

An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file.

Risk Assessment

Attackers can gain full control over the server by executing malicious scripts, leading to compromise of data confidentiality, integrity, and availability.

Recommendation

Immediately update Web@rchiv to the latest version and implement file type validation and script execution restrictions in the upload directory.

Original NVD description (English source)

An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file.