CVE-2022-50806

HIGH

7.2

Beschreibung

4images 1.9 contains a remote command execution vulnerability that allows authenticated administrators to inject reverse shell code through template editing functionality. Attackers can save malicious code in the template and execute arbitrary commands by accessing a specific categories.php endpoint with a crafted cat_id parameter.

CVE Details

CVSS v3.1 Bewertung7.2

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienHIGH

BenutzerinteraktionNONE

Veroffentlicht1/13/2026

Zuletzt geandert2/2/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

4homepages:4images

Schwachen (CWE)

CWE-94

Referenzen

https://www.4homepages.de/(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/51147(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/images-remote-command-execution-rce(disclosure@vulncheck.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.