CVE-2023-53956
HIGHFlatnux 2021-03.25 - Authenticated Remote Code Execution via File Manager PHP Upload
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-53956. PoCs published by Ömer Hasan Durmuş.
AI-analyzed exploit summary This exploit demonstrates an authenticated file upload vulnerability in flatnux-2021-03.25, allowing an attacker to upload a malicious PHP file via the filemanager.php endpoint. The uploaded file can then be executed to achieve remote code execution (RCE).
Description
Flatnux 2021-03.25 contains an authenticated file upload vulnerability that allows administrative users to upload arbitrary PHP files through the file manager. Attackers with admin credentials can upload malicious PHP scripts to the web root directory, enabling remote code execution on the server.
Exploits (1)
This exploit demonstrates an authenticated file upload vulnerability in flatnux-2021-03.25, allowing an attacker to upload a malicious PHP file via the filemanager.php endpoint. The uploaded file can then be executed to achieve remote code execution (RCE).
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H