CVE-2023-37629

EPSS 23.3%

Vexday Risk Score

43Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 23.3%KEV nãoPoC públicaNuclei simMetasploit —Patch —

Lifecycle

12 Jul 2023Published on NVD

19 Jul 2023Public PoC

Weaponization speed

7 daysto first PoC

Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.

Recommendation: Plan a near-term fix — a public PoC already exists.

Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php."

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/173656/Online-Piggery-Management-System-1.0-Shell-Upload.htmlunverified exploitdbwww.exploit-db.com/exploits/51598unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/173656/Online-Piggery-Management-System-1.0-Shell-Upload.html https://github.com/1337kid/Piggery_CMS_multiple_vulns_PoC/tree/main/CVE-2023-37629 https://www.sourcecodester.com/php/11814/online-pig-management-system-basic-free-version.html