CVE-2023-2245

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227230 is the identifier assigned to this vulnerability.

• CWE-434
• CWE-434

• https://github.com/MorStardust/hansuncmswebshell/blob/main/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.227230Permissions Required, Third Party Advisory
• https://vuldb.com/?id.227230Third Party Advisory
• https://github.com/MorStardust/hansuncmswebshell/blob/main/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.227230Permissions Required, Third Party Advisory
• https://vuldb.com/?id.227230Third Party Advisory

Published

Apr 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22442Out of bounds write in some Intel(R) Server Board BMC firmwa…7.1
• CVE-2023-22443Integer overflow in some Intel(R) Server Board BMC firmware …5.5
• CVE-2023-22444Improper initialization in some Intel(R) NUC 13 Extreme Comp…4.4
• CVE-2023-22447Insertion of sensitive information into log file in the Open…4.4
• CVE-2023-22448Improper access control for some Intel Unison software may a…7.2
• CVE-2023-22449Improper input validation in some Intel(R) NUC BIOS firmware…6.7
• CVE-2023-22450 In Advantech WebAccss/SCADA v9.1.3 and prior, there is an…7.2
• CVE-2023-22451Kiwi TCMS is an open source test management system. In versi…8.8
• CVE-2023-22452kenny2automate is a Discord bot. In the web interface for se…6.5
• CVE-2023-22453Discourse is an option source discussion platform. Prior to …5.3
• CVE-2023-22454Discourse is an option source discussion platform. Prior to …6.1
• CVE-2023-22455Discourse is an option source discussion platform. Prior to …6.1