EXPOSURES › CVE-2022-26645
CVE-2022-26645
CRITICAL
DETAIL
SourceNVD · cve
Published2022-03-30
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-26645 ↗
⚡ RCE
SHAME 50/100
rce
A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
PLAYERS IMPLICATED
DESCRIPTION
A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.