CVE-2022-50912 — AI Deep Analysis Summary

Q: Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-434** (Unrestricted Upload of File with Dangerous Type). 🔍 **Flaw**: Improper cleaning/validation of file upload extensions. The system fails to reject dangerous file types like `.php`.

Q: Who is affected? (Versions/Components)

📦 **Affected**: **ImpressCMS** (by ImpressCMS Company). 📌 **Version**: Specifically **1.4.4**. 🌐 **Type**: MySQL-based, modular CMS (News, Forum, Album modules).

Q: What can hackers do? (Privileges/Data)

👑 **Privileges**: Full **Remote Code Execution**. 📂 **Data**: Complete access to server files, database, and system commands. ⚠️ **Impact**: High (CVSS H). Attackers can run arbitrary PHP code on the server.

Q: Is exploitation threshold high? (Auth/Config)

📉 **Threshold**: **LOW**. 🔓 **Auth**: **None Required** (PR:N). 🌐 **Network**: Remote (AV:N). 👀 **UI**: No User Interaction needed (UI:N). Easy to exploit!

Q: Is there a public Exp? (PoC/Wild Exploitation)

💣 **Public Exploit**: **YES**. 🔗 **Source**: ExploitDB **50890**. 🌍 **Status**: Wild exploitation is possible. VulnCheck also has advisories confirming unrestricted upload.

Q: Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL**. ⏱️ **Priority**: **Immediate Action**. 📉 **Risk**: CVSS 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. No auth needed + RCE = **Patch or Mitigate NOW**.

Updated May 06, 2026 CVSS 9.8 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: A critical code flaw in ImpressCMS allowing **unrestricted file uploads**. <br>💥 **Consequences**: Attackers can upload malicious PHP files, leading to **Remote Code Execution (RCE)**.…

Read full answer (login)

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-434** (Unrestricted Upload of File with Dangerous Type). <br>🔍 **Flaw**: Improper cleaning/validation of file upload extensions. The system fails to reject dangerous file types like `.php`.

Q3Who is affected? (Versions/Components)

📦 **Affected**: **ImpressCMS** (by ImpressCMS Company). <br>📌 **Version**: Specifically **1.4.4**. <br>🌐 **Type**: MySQL-based, modular CMS (News, Forum, Album modules).

Q4What can hackers do? (Privileges/Data)

👑 **Privileges**: Full **Remote Code Execution**. <br>📂 **Data**: Complete access to server files, database, and system commands. <br>⚠️ **Impact**: High (CVSS H). Attackers can run arbitrary PHP code on the server.

Q5Is exploitation threshold high? (Auth/Config)

📉 **Threshold**: **LOW**. <br>🔓 **Auth**: **None Required** (PR:N). <br>🌐 **Network**: Remote (AV:N). <br>👀 **UI**: No User Interaction needed (UI:N). Easy to exploit!

Q6Is there a public Exp? (PoC/Wild Exploitation)

💣 **Public Exploit**: **YES**. <br>🔗 **Source**: ExploitDB **50890**. <br>🌍 **Status**: Wild exploitation is possible. VulnCheck also has advisories confirming unrestricted upload.

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: Scan for ImpressCMS 1.4.4 installations. <br>📤 **Test**: Attempt to upload a `.php` file via any upload feature (news, forum, album).…

Read full answer (login)

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Official Fix**: Check the **ImpressCMS GitHub Repository** and official homepage. <br>⚠️ **Note**: The provided data lists the GitHub repo but does not explicitly confirm a patch release date.…

Read full answer (login)

Q9What if no patch? (Workaround)

🚧 **Workaround**: **Disable file uploads** entirely if not needed. <br>🚫 **Restrict**: Implement strict server-side WAF rules to block `.php` extensions in upload directories.…

Read full answer (login)

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL**. <br>⏱️ **Priority**: **Immediate Action**. <br>📉 **Risk**: CVSS 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. No auth needed + RCE = **Patch or Mitigate NOW**.

Continue exploring

Vulnerability detail Full AI analysis (login) ImpressCMS CWE-434