Vulnerability CVE-2022-36749


Published: 2022-08-30   Modified: 2022-08-31

Description:
RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file.

 References:
https://github.com/MiczFlor/RPi-Jukebox-RFID/issues/1859

Copyright 2026, cxsecurity.com

 

Back to Top