CVE-2022-2736 MEDIUM

CVE-2022-2736: SourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted upload

Vendor Sourcecodester
Product Company Website CMS
Weakness CWE-434 · Unrestricted file upload
Published August 11, 2022
Last update April 15, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability was found in SourceCodester Company Website CMS. It has been classified as critical. This affects an unknown part of the file /dashboard/updatelogo.php of the component Background Upload Logo Icon. The manipulation of the argument xfile/ufile leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-205881 was assigned to this vulnerability.

Key dates

02Disclosure timeline

August 11, 2022 CVE published
April 15, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-14632 Filr – Secure document library <= 1.2.11 - Authenticated (Administrator+) Stored Cross-Site Scripting via HTML Upload CVE-2024-49324 WordPress Sovratec Case Management plugin <= 1.0.0 - Arbitrary File Upload vulnerability CVE-2021-24311 External Media < 1.0.34 - Authenticated Arbitrary File Upload CVE-2020-37113 GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass CVE-2025-22213 [20250301] - Core - Malicious file uploads via Media Manager