← back
CVE-2023-38836

CVE-2023-38836

EPSS 73.2%
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.
Affected products
n/a · n/a
public PoCs found — 3
githubgithub.com/1337kid/CVE-2023-38836★ 5exploitdbwww.exploit-db.com/exploits/51741unverifiedcve_referencepacketstormsecurity.com/files/175026/BoidCMS-2.0.0-Shell-Upload.htmlunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://boidcms.comhttp://packetstormsecurity.com/files/175026/BoidCMS-2.0.0-Shell-Upload.htmlhttps://github.com/BoidCMS/BoidCMS/issues/27