Main Vulnerability Database Vulnerabilities #VU71472

Command Injection in User Post Gallery - UPG - CVE-2023-0039

Published: January 24, 2023

Vulnerability identifier: #VU71472

CSH Severity: High

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2023-0039

CWE-ID: CWE-77

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: odude

Affected software:
User Post Gallery - UPG

Detailed vulnerability description

The vulnerability allows a remote attacker to execute arbitrary commands on the target system.

The vulnerability exists due to authorization bypass. A remote unauthenticated attacker can execute arbitrary commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.