CVE-2022-2750

A vulnerability, which was classified as critical, was found in SourceCodester Company Website CMS. Affected is an unknown function of the file /dashboard/add-service.php of the component Add Service Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-206022 is the identifier assigned to this vulnerability.

• CWE-434
• CWE-434

• https://vuldb.com/?id.206022Third Party Advisory, VDB Entry
• https://vuldb.com/?id.206022Third Party Advisory, VDB Entry

Published

Aug 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27494Aethon TUG Home Base Server versions prior to version 24 are…5.4
• CVE-2022-27495On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh co…6.5
• CVE-2022-27496Cross-site scripting vulnerability in Zero-channel BBS Plus …6.1
• CVE-2022-27497Null pointer dereference in firmware for Intel(R) AMT before…7.5
• CVE-2022-27498A directory traversal vulnerability exists in the TicketTemp…6.5
• CVE-2022-27499Premature release of resource during expected lifetime in th…4.4
• CVE-2022-27500Incorrect default permissions for the Intel(R) Support Andro…5.5
• CVE-2022-27502RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows lo…7.8
• CVE-2022-27503Cross-site Scripting (XSS) vulnerability in Citrix StoreFron…6.1
• CVE-2022-27505Reflected cross site scripting (XSS)6.1
• CVE-2022-27506Hard-coded credentials allow administrators to access the sh…2.7
• CVE-2022-27507Authenticated denial of service6.5