Main Vulnerability Database Vulnerabilities #VU71472

#VU71472 Command Injection in User Post Gallery - UPG - CVE-2023-0039

Published: January 24, 2023

Vulnerability identifier: #VU71472

Vulnerability risk: High

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2023-0039

CWE-ID: CWE-77

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
User Post Gallery - UPG

Software vendor:
odude

Description

The vulnerability allows a remote attacker to execute arbitrary commands on the target system.

The vulnerability exists due to authorization bypass. A remote unauthenticated attacker can execute arbitrary commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.