CVE-2023-27178
published 2023-04-10CVE-2023-27178: An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted file.
PriorityP352critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.36%
68.4th percentile
An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted file.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gdidees | gdidees_cms | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gist.github.com/Hadi999/4bc173bfb802c229b9bb397fa906847bhttps://nvd.nist.gov/vuln/detail/CVE-2022-40797https://salsa.debian.org/php-team/php/-/blob/dc253886b5b2e9bc8d9e36db787abb083a667fd8/debian/php-cgi.conf#L5-6https://www.gdidees.eu/cms-1-0.htmlhttps://gist.github.com/Hadi999/4bc173bfb802c229b9bb397fa906847bhttps://nvd.nist.gov/vuln/detail/CVE-2022-40797https://salsa.debian.org/php-team/php/-/blob/dc253886b5b2e9bc8d9e36db787abb083a667fd8/debian/php-cgi.conf#L5-6https://www.gdidees.eu/cms-1-0.html
2023-04-10
Published