CVE-2023-53871

Summary

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

Affected Software

Weaknesses

• CWE-434: Unrestricted Upload of File with Dangerous Type

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.exploit-db.com/exploits/51718
• https://soosyze.com/
• https://github.com/soosyze/soosyze
• https://www.vulncheck.com/advisories/soosyze-unrestricted-file-upload-via-broken-upload-logic

• ←Previous
• Next→