critical9.8Public exploit code
CVE-2023-37629
Online Piggery Management System 1.0 is vulnerable to File Upload.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Online Piggery Management System v1.0 - unauthenticated file upload vulnerability2023-07-19 · webapps · php · Verified
Impact
Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple Online Piggery Management System Project | Simple Online Piggery Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/173656/Online-Piggery-Management-System-1.0-Shell-Upload.html
- https://github.com/1337kid/Piggery_CMS_multiple_vulns_PoC/tree/main/CVE-2023-37629
- https://www.sourcecodester.com/php/11814/online-pig-management-system-basic-free-version.html
- http://packetstormsecurity.com/files/173656/Online-Piggery-Management-System-1.0-Shell-Upload.html
- https://github.com/1337kid/Piggery_CMS_multiple_vulns_PoC/tree/main/CVE-2023-37629
- https://www.sourcecodester.com/php/11814/online-pig-management-system-basic-free-version.html