CVE-2022-26645

Severity

critical

Source

NVD · cve

Published

2022-03-30

CVSS

9.8

Reference

https://nvd.nist.gov/vuln/detail/CVE-2022-26645

⚡ RCE shame 50/100 rce

A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function.

Players implicated

oretnom23 · vendor banking system · product

Description

A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.