CVE-2022-2740

A vulnerability was found in SourceCodester Company Website CMS. It has been declared as critical. This vulnerability affects unknown code of the file /dashboard/add-blog.php of the component Add Blog. The manipulation of the argument ufile leads to unrestricted upload. The attack can be initiated remotely. VDB-205882 is the identifier assigned to this vulnerability.

• CWE-434

• https://vuldb.com/?id.205882Third Party Advisory, VDB Entry
• https://vuldb.com/?id.205882Third Party Advisory, VDB Entry

Published

Aug 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27383MariaDB Server v10.6 and below was discovered to contain an …7.5
• CVE-2022-27384An issue in the component Item_subselect::init_expr_cache_tr…7.5
• CVE-2022-27385An issue in the component Used_tables_and_const_cache::used_…7.5
• CVE-2022-27386MariaDB Server v10.7 and below was discovered to contain a s…7.5
• CVE-2022-27387MariaDB Server v10.7 and below was discovered to contain a g…7.5
• CVE-2022-2739The version of podman as released for Red Hat Enterprise Lin…5.3
• CVE-2022-27404FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was…9.8
• CVE-2022-27405FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was…7.5
• CVE-2022-27406FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was…7.5
• CVE-2022-2741The denial-of-service can be triggered by transmitting a car…7.5
• CVE-2022-27411TOTOLINK N600R v5.3c.5507_B20171031 was discovered to contai…9.8
• CVE-2022-27412Explore CMS v1.0 was discovered to contain a SQL injection v…9.8