by Kastro
Paper/Archive/CVE-2023-37152

CVE-2023-37152

mitre — Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 80.7.807 × 2016.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. Note: This has been disputed as not a valid vulnerability.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refexploit-db.com/exploits/51524refgithub.com/Trinity-SYT-SECURITY/arbitrary-file-upload-RCE/blob/main/Online%20Art%20gallery%20project%201.0.mdrefchtsecurity.com/news/afe25fb4-55ac-45d9-9ece-cbc1edda2fb2%20refchtsecurity.com/news/ad3cee07-3e35-45c0-97f9-811cce13dda9