CVE-2022-44006 - CVE House
Back to Database
Status published Unknown CVE-2022-44006

An issue was discovered in BACKCLICK Professional 5.9.63. Due to...

Vulnerability Description

An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation or sanitization of upload filenames, an externally reachable, unauthenticated update function permits writing files outside the intended target location. Achieving remote code execution is possible, e.g., by uploading an executable file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-44006

Credits & Attribution

No credits recorded in the NVD database.

References

More from backclick

View All →
CVE-2022-44008
An issue was discovered in BACKCLICK Professional 5.9.63. Due to...
Unknown 0
CVE-2022-44007
An issue was discovered in BACKCLICK Professional 5.9.63. Due to...
Unknown 0
CVE-2022-44005
An issue was discovered in BACKCLICK Professional 5.9.63. Due to...
Unknown 0
CVE-2022-44004
An issue was discovered in BACKCLICK Professional 5.9.63. Due to...
Unknown 0
CVE-2022-44003
An issue was discovered in BACKCLICK Professional 5.9.63. Due to...
Unknown 0

Affected Vendor

Affected Software

backclick
Vulnerable Versions:
5.9.63

Timeline

Official Publish: November 16th, 2022
Last Modified: April 30th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.