Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-47083

Description

A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending crafted requests to the web application.

POC

Reference

- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5720.php

Github

No PoCs found on GitHub currently.