high7.2
CVE-2023-53889
Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets manageme…
Impact
Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets management interface. Attackers can upload a malicious .phar file with embedded system command execution capabilities to execute arbitrary commands on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grabaperch | Perch | Version 3.2 |