CVE-2022-29624 - An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file

HIGH

An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file

Published May 31, 2022

8.8

HIGH

CVSS 3.1

EPSS 1.26%

An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file.

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33954		Advisory
https://gitee.com/happy_source/tpcms		x_refsource_MISCProduct
https://gitee.com/happy_source/tpcms/issues/I533KY		x_refsource_MISCExploitIssue TrackingThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 31, 2022

Updated Aug 3, 2024

Reserved Apr 25, 2022

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 31, 2022

Updated Aug 3, 2024

GitHub

No data