CVE-2023-53871
Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic
Résumé
Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com
- web soosyze.com