CVE-2023-31903
CRITICALGuppY CMS 6.00.10 - Unrestricted File Upload and Remote Code Execution via PHP File Upload
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-31903. PoCs published by Chokri Hammedi.
AI-analyzed exploit summary This exploit demonstrates a Remote Code Execution (RCE) vulnerability in GuppY CMS v6.00.10 by authenticating as an administrator, uploading a malicious PHP shell, and executing arbitrary commands. The exploit uses cURL to handle authentication and file upload processes.
Description
GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.
Exploits (1)
This exploit demonstrates a Remote Code Execution (RCE) vulnerability in GuppY CMS v6.00.10 by authenticating as an administrator, uploading a malicious PHP shell, and executing arbitrary commands. The exploit uses cURL to handle authentication and file upload processes.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H