CVE-2023-53871

EIP tracks 1 public exploit for CVE-2023-53871. PoCs published by nu11secur1ty.

AI-analyzed exploit summary This exploit demonstrates a broken file upload vulnerability in soosyze 2.0.0, allowing an attacker to upload a malicious HTML file containing PHP code (e.g., phpinfo()) to potentially expose sensitive file paths or execute arbitrary code.

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.