Filtered by vendor Shift-tech Subscriptions
Filtered by product Bingo\!cms Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-42458 1 Shift-tech 1 Bingo\!cms 2024-11-21 9.8 Critical
Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered.