CVE-2023-53869

WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Execution

CVSS 8.7 HIGHEPSS 0.4%CWE-434

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 dic 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media function. Attackers can leverage any created account to upload malicious PHP scripts that enable remote code execution on the application server.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

WebIGniter · WebIGniter

Referencias

https://webigniter.net/https://www.exploit-db.com/exploits/51736 https://www.vulncheck.com/advisories/webigniter-unrestricted-file-upload-remote-code-execution