CVE-2022-29347
Critical · CVSS 9.8Web@rchiv — Arbitrary File Upload leading to Remote Code Execution (RCE)
- CVSS
- 9.8
- nvd
- EPSS
- 2.12%
- 80th pct
- KEV
- No
- Class
- other
- CWE-434
Description
An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file.
Search profile — drives PoC discovery
Symbols file uploadPHP file uploadcrafted PHP filearbitrary file uploadexecute arbitrary commands
Keywords CVE-2022-29347Web@rchivarbitrary file uploadPHP webshell uploadCWE-434evildrummerzeitpraxwebarchiv
Versions: 1.0
Ranked PoCs (2) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0
- ★ 0karimhabush/cyberowl needs reviewtrickest
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T12:30:39.000Z