CVE-2023-53933

EIP tracks 1 public exploit for CVE-2023-53933. PoCs published by Mirabbas Ağalarov.

AI-analyzed exploit summary This exploit demonstrates an authenticated RCE vulnerability in Serendipity 2.4.0 via file upload. The attacker uploads a malicious PHAR file containing PHP code to execute system commands, leveraging improper file type validation.

Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension. Attackers can upload files with system command payloads to the media upload endpoint and execute arbitrary commands on the server.