critical9.8
CVE-2023-37152
Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page.
Impact
Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. Note: This has been disputed as not a valid vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Art Gallery Project | Online Art Gallery | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Trinity-SYT-SECURITY/arbitrary-file-upload-RCE/blob/main/Online%20Art%20gallery%20project%201.0.md
- https://www.chtsecurity.com/news/ad3cee07-3e35-45c0-97f9-811cce13dda9
- https://www.chtsecurity.com/news/afe25fb4-55ac-45d9-9ece-cbc1edda2fb2%20
- https://www.exploit-db.com/exploits/51524
- https://github.com/Trinity-SYT-SECURITY/arbitrary-file-upload-RCE/blob/main/Online%20Art%20gallery%20project%201.0.md
- https://www.chtsecurity.com/news/ad3cee07-3e35-45c0-97f9-811cce13dda9
- https://www.chtsecurity.com/news/afe25fb4-55ac-45d9-9ece-cbc1edda2fb2%20
- https://www.exploit-db.com/exploits/51524