CVE-2022-28062

PoC ×2—

CVSS 3.1

8.8 high

EPSS

2%p78

Published

Apr 4, 2022 (Apr 4, 2022)

Modified

Jun 17, 2026

Description

Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code.

Vendors: online car rental system project
Products: online car rental system
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.