CVE-2023-38836
CVE-2023-38836
Vexday Risk Score
50Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Popular PoC on GitHub (5 stars) — exploitation code widely available.
CVSS —EPSS 69.0%KEV nãoPoC públicaNuclei —Metasploit simPatch —
Lifecycle
13 Jul 2023Metasploit module available
16 Aug 2023Public PoC
21 Aug 2023Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.
Affected products
n/a · n/apublic PoCs found — 3
githubgithub.com/1337kid/CVE-2023-38836★ 5exploitdbwww.exploit-db.com/exploits/51741unverifiedcve_referencepacketstormsecurity.com/files/175026/BoidCMS-2.0.0-Shell-Upload.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.