CVE-2023-1046

A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221805 was assigned to this vulnerability.

• CWE-918

• https://github.com/MuYuCMS/MuYuCMS/issues/7Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.221805Permissions Required
• https://vuldb.com/?id.221805Permissions Required
• https://github.com/MuYuCMS/MuYuCMS/issues/7Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.221805Permissions Required
• https://vuldb.com/?id.221805Permissions Required

Published

Feb 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1040A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-1041A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2023-1042A vulnerability has been found in SourceCodester Online Pet …6.1
• CVE-2023-1043A vulnerability was found in MuYuCMS 2.2. It has been classi…4.3
• CVE-2023-1044A vulnerability was found in MuYuCMS 2.2. It has been declar…8.8
• CVE-2023-1045A vulnerability was found in MuYuCMS 2.2. It has been rated …8.1
• CVE-2023-1047A vulnerability classified as critical was found in TechPowe…7.8
• CVE-2023-1048A vulnerability, which was classified as critical, has been …7.8
• CVE-2023-1049 A CWE-94: Improper Control of Generation of Code ('Code Inj…7.8
• CVE-2023-1050Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-1051Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-1053A vulnerability was found in SourceCodester Music Gallery Si…9.8