CVE-2022-3771

A vulnerability, which was classified as critical, has been found in easyii CMS. This issue affects the function file of the file helpers/Upload.php of the component File Upload Management. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The identifier VDB-212501 was assigned to this vulnerability.

• CWE-266
• CWE-434

• https://vuldb.com/?id.212501Third Party Advisory, VDB Entry
• https://vuldb.com/?id.212501Third Party Advisory, VDB Entry

Published

Oct 31, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-37703In Amanda 3.5.1, an information leak vulnerability was found…3.3
• CVE-2022-37704Amanda 3.5.1 allows privilege escalation from the regular us…6.7
• CVE-2022-37705A privilege escalation flaw was found in Amanda 3.5.1 in whi…6.7
• CVE-2022-37706enlightenment_sys in Enlightenment before 0.25.4 allows loca…7.8
• CVE-2022-37708Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-37709Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile ap…5.3
• CVE-2022-37710Patterson Dental Eaglesoft 21 has AES-256 encryption but the…7.8
• CVE-2022-37718The management portal component of JetNexus/EdgeNexus ADC 4.…8.8
• CVE-2022-37719A Cross-Site Request Forgery (CSRF) in the management portal…8.8
• CVE-2022-3772Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-37720Orchardproject Orchard CMS 1.10.3 is vulnerable to Cross Sit…9
• CVE-2022-37721PyroCMS 3.9 is vulnerable to a stored Cross Site Scripting (…9