CVE-2022-34971

An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.

• CWE-434

• https://github.com/liufee/cms/issues/62Exploit, Issue Tracking, Third Party Advisory
• https://github.com/liufee/cms/issues/62Exploit, Issue Tracking, Third Party Advisory

Published

Jul 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34966OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was …7.5
• CVE-2022-34967The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Datab…7.5
• CVE-2022-34968An issue in the fetch_step function in Percona Server for My…7.5
• CVE-2022-34969PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer…7.5
• CVE-2022-3497A vulnerability was found in SourceCodester Human Resource M…5.4
• CVE-2022-34970Crow before 1.0+4 has a heap-based buffer overflow via the f…9.8
• CVE-2022-34972So Filter Shop v3.x was discovered to contain multiple blind…9.8
• CVE-2022-34973D-Link DIR820LA1_FW106B02 was discovered to contain a buffer…7.5
• CVE-2022-34974D-Link DIR810LA1_FW102B22 was discovered to contain a comman…9.8
• CVE-2022-34981The PyCrowdTangle package in PyPI before v0.0.1 included a c…9.8
• CVE-2022-34982The eziod package in PyPI before v0.0.1 included a code exec…9.8
• CVE-2022-34983The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a …9.8