{"id":"CVE-2022-50912","aliases":["EUVD-2026-2619","GHSA-9h6r-9xvw-j888"],"status":"published","title":"ImpressCMS 1.4.4 - Unrestricted File Upload","description":"ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious files. Attackers can bypass file upload restrictions by using alternative file extensions .php2.php6.php7.phps.pht to execute arbitrary PHP code on the server.","severity":{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01217,"percentile":0.68981,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2026-01-13T22:51:51Z","modified":"2026-10-28T02:30:54Z","products":[{"vendor":"impresscms","product":"impresscms"}],"references":[{"url":"https://www.exploit-db.com/exploits/50890","tags":["exploit","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://www.impresscms.org/","tags":["product","Product","web"]},{"url":"https://github.com/ImpressCMS/impresscms","tags":["product","Product","package"]},{"url":"https://www.vulncheck.com/advisories/impresscms-unrestricted-file-upload","tags":["third-party-advisory","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50912","tags":["advisory"]},{"url":"https://www.impresscms.org"},{"url":"https://github.com/advisories/GHSA-9h6r-9xvw-j888"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50912.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-50912","title":"ImpressCMS 1.4.4 - Unrestricted File Upload","description":"ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious files. Attackers can bypass file upload restrictions by using alternative file extensions .php2.php6.php7.phps.pht to execute arbitrary PHP code on the server.","status":"published","published":"2026-01-13T22:51:51.296Z","modified":"2026-03-05T01:29:30.264Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:34:40.621895Z"}],"euvd":[{"id":"EUVD-2026-2619","description":"ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious files. Attackers can bypass file upload restrictions by using alternative file extensions .php2.php6.php7.phps.pht to execute arbitrary PHP code on the server.","status":"published","published":"2026-01-13T22:51:51Z","modified":"2026-03-05T01:29:30Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T19:48:09.383214Z"}],"ghsa":[{"id":"GHSA-9h6r-9xvw-j888","title":"ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that...","description":"ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious files. Attackers can bypass file upload restrictions by using alternative file extensions .php2.php6.php7.phps.pht to execute arbitrary PHP code on the server.","status":"published","published":"2026-01-14T00:31:28Z","modified":"2026-01-14T00:31:35Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T15:05:35.747641Z"}],"nvd":[{"id":"CVE-2022-50912","description":"ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious files. Attackers can bypass file upload restrictions by using alternative file extensions .php2.php6.php7.phps.pht to execute arbitrary PHP code on the server.","status":"published","published":"2026-01-13T23:15:54.35Z","modified":"2026-06-17T05:24:24.453Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:07:43.46277Z"}],"osv":[{"id":"CVE-2022-50912","title":"ImpressCMS 1.4.4 - Unrestricted File Upload","description":"ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious files. Attackers can bypass file upload restrictions by using alternative file extensions .php2.php6.php7.phps.pht to execute arbitrary PHP code on the server.","status":"published","published":"2026-01-13T22:51:51.296Z","modified":"2026-10-28T02:30:54.242319474Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T15:44:29.084154Z"}]}}