An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.
References
| Link | Resource |
|---|---|
| http://taocms.com | Broken Link URL Repurposed |
| https://github.com/taogogo/taocms | Release Notes Third Party Advisory |
| https://github.com/taogogo/taocms/issues/34 | Exploit Third Party Advisory |
| https://github.com/taogogo/taocms/issues/34?by=xboy%28topsec%29 |
Configurations
History
14 Feb 2024, 01:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://taocms.com - Broken Link, URL Repurposed |
16 Aug 2022, 19:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/taogogo/taocms/issues/34?by=xboy(topsec) - Exploit, Third Party Advisory | |
| References | (MISC) https://github.com/taogogo/taocms - Release Notes, Third Party Advisory | |
| References | (MISC) http://taocms.com - Broken Link | |
| References | (MISC) https://github.com/taogogo/taocms/issues/34 - Exploit, Third Party Advisory | |
| CWE | CWE-94 | |
| CPE | cpe:2.3:a:taogogo:taocms:3.0.2:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
15 Aug 2022, 12:59
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-15 12:15
Updated : 2024-02-14 01:17
NVD link : CVE-2022-36262
Mitre link : CVE-2022-36262
CVE.ORG link : CVE-2022-36262
JSON object : View
Products Affected
taogogo
- taocms
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')