CVE-2022-2418

URVE Web Manager img_upload.php unrestricted upload

A vulnerability was found in URVE Web Manager. It has been classified as critical. This affects an unknown part of the file kreator.html5/img_upload.php. The manipulation leads to unrestricted upload. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used.

Affected

URVE · Web Manager

CVSS v3.1 NVD

8.0 HIGHCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.15% chance of exploitation in the next 30 days, 66th percentile

Published

2022-07-15

Updated

2025-04-15

Proof-of-concept exploits (1)

• joinia/webray.com.cn/blob/main/URVE/URVE%20Web%20Manager%20img_upload.php%20File%20upload…0★ · 2025-09-04

Security advisories

• https://vuldb.com/?id.203901

References

• CVE Record
• NVD entry

Related

• CVE-2022-1503
• CVE-2022-1590
• CVE-2022-2086
• CVE-2022-2087
• CVE-2022-2419
• CVE-2022-2420