NVD disclosure day
CVE-2022-44089
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical remote code execution vulnerability exists in ESPCMS's IS_GETCACHE component, potentially allowing unauthenticated attackers to run arbitrary code. This could impact system integrity and availability.
CVE-2022-44088
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical remote code execution vulnerability exists in ESPCMS's INPUT_ISDESCRIPTION component. If reachable, an unauthenticated attacker could exploit this flaw over the network to execute arbitrary code, potentially compromising system integrity and availability.
CVE-2022-44087
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A remote code execution vulnerability exists in ESPCMS's UPFILE_PIC_ZOOM_HIGHT component, allowing unauthenticated network access for potential system compromise. This could lead to significant data breaches and service disruptions for organizations using ESPCMS for their web presence.