Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2023-53871

Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic

Description

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Soosyze Soosyze

  • 2.0.0affected

References