Vulnerability Description
An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Taogogo | Taocms | 3.0.2 |
Related Weaknesses (CWE)
References
- http://taocms.comBroken LinkURL Repurposed
- https://github.com/taogogo/taocmsRelease NotesThird Party Advisory
- https://github.com/taogogo/taocms/issues/34ExploitThird Party Advisory
- https://github.com/taogogo/taocms/issues/34?by=xboy%28topsec%29
- http://taocms.comBroken LinkURL Repurposed
- https://github.com/taogogo/taocmsRelease NotesThird Party Advisory
- https://github.com/taogogo/taocms/issues/34ExploitThird Party Advisory
- https://github.com/taogogo/taocms/issues/34?by=xboy%28topsec%29
FAQ
What is CVE-2022-36262?
CVE-2022-36262 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.
How severe is CVE-2022-36262?
CVE-2022-36262 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-36262?
Check the references section above for vendor advisories and patch information. Affected products include: Taogogo Taocms.