CVE-2022-25578
Critical · CVSS 9.8taocms — Code Injection via arbitrary .htaccess file edit
- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-94
Description
taocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file.
Search profile — drives PoC discovery
Symbols .htaccesstaocmsfile editcode injectionhtaccess edit
Keywords CVE-2022-25578taocmstaocms v3.0.2htaccess code injectiontaocms htaccesstaocms arbitrary file edittaocms RCEtaocms PoCtaogogo taocms issue 28
Versions: 3.0.2
Ranked PoCs (2) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0k0xx11/Vulscve needs reviewtrickest
- ★ 0superlink996/chunqiuyunjingbachang needs reviewtrickest
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T06:30:39.000Z