CVE-2023-53885
HIGHWebutler 3.2 - Authenticated Remote Code Execution via PHAR File Upload
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-53885. PoCs published by Mirabbas Ağalarov.
AI-analyzed exploit summary This exploit demonstrates a Remote Code Execution (RCE) vulnerability in Webutler CMS v3.2 by uploading a malicious PHAR file through the media upload functionality. The PHAR file contains PHP code that executes system commands, allowing arbitrary command execution on the target system.
Description
Webutler v3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload PHP files with system command execution. Attackers can upload a PHAR file with embedded system commands to the media browser and execute arbitrary commands by accessing the uploaded file.
Exploits (1)
This exploit demonstrates a Remote Code Execution (RCE) vulnerability in Webutler CMS v3.2 by uploading a malicious PHAR file through the media upload functionality. The PHAR file contains PHP code that executes system commands, allowing arbitrary command execution on the target system.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H