CVE-2023-5919: medium-severity vulnerability in SourceCodester Company Website CMS
SourceCodester Company Website CMS Create Blog Page createblog unrestricted upload
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.7epss 0.9%
A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /dashboard/createblog of the component Create Blog Page. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-244310 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected products
SourceCodester · Company Website CMSRelated CVEs — SourceCodester Company Website CMS
In the same product, most dangerous first.
CVE-2022-2765MEDIUMSourceCodester Company Website CMS settings improper authenticationEPSS 1.2%CVE-2022-2694MEDIUMSourceCodester Company Website CMS unrestricted uploadEPSS 0.9%CVE-2022-2751MEDIUMSourceCodester Company Website CMS add-portfolio.php unrestricted uploadEPSS 0.7%CVE-2022-2750MEDIUMSourceCodester Company Website CMS Add Service add-service.php unrestricted uploadEPSS 0.7%CVE-2022-2740MEDIUMSourceCodester Company Website CMS Add Blog add-blog.php unrestricted uploadEPSS 0.7%CVE-2022-2736MEDIUMSourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted uploadEPSS 0.7%