CVE-2022-44088
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
ESPCMS P8.21120101 was found to have a remote code execution (RCE) vulnerability in the INPUT_ISDESCRIPTION component. An attacker can exploit this flaw to execute arbitrary code on the server.
Risk Assessment
The risk for the organization includes potential server takeover, data theft, or system disruption by an unauthorized attacker.
Recommendation
It is recommended to immediately update ESPCMS to the latest available version and apply security patches provided by the vendor.
Other vulnerabilities in ESPCMS
See all- CVE-2022-44089Critical
A remote code execution (RCE) vulnerability was discovered in ESPCMS P8.21120101 within the IS_GETCACHE component. Attackers can exploit this flaw to execute arbitrary code on the server.
- CVE-2022-44087Critical
ESPCMS P8.21120101 contains a remote code execution (RCE) vulnerability in the UPFILE_PIC_ZOOM_HIGHT component. An attacker can exploit this flaw to execute arbitrary code on the server.
Original NVD description (English source)
ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCRIPTION.