https://vulnerability.circl.lu/sightings/feed 2026-05-10T09:45:08.018655+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8bf3a91f-6607-4b6b-ae43-5ecf80ed00cb/export 2026-05-10T09:45:08.389817+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "8bf3a91f-6607-4b6b-ae43-5ecf80ed00cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40797", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14326", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40797\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.json only blocks .php, .php4, and .php5 files. (Visiting any .phar file invokes the PHP interpreter in some realistic web-server configurations.)\n\ud83d\udccf Published: 2022-11-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T15:51:32.573Z\n\ud83d\udd17 References:\n1. https://salsa.debian.org/php-team/php/-/blob/dc253886b5b2e9bc8d9e36db787abb083a667fd8/debian/php-cgi.conf#L5-6\n2. https://gist.github.com/Hadi999/1f66fe7c5a217ca261ebfec36c630d18\n3. https://web.archive.org/web/20210126213412/https://roxyfileman.com/download.php?f=1.4.6-php\n4. http://packetstormsecurity.com/files/169964/Roxy-Fileman-1.4.6-Remote-Shell-Upload.html", "creation_timestamp": "2025-05-01T16:14:39.000000Z"} 2025-05-01T16:14:39+00:00