Vulnerability Description
File upload vulnerability found in Softexpert Excellence Suite v.2.1 allows attackers to execute arbitrary code via a .php file upload to the form/efms_exec_html/file_upload_parser.php endpoint.
CVSS Score
6.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Related Weaknesses (CWE)
References
- https://gist.github.com/rodnt/90ac26fdf891e602f6f090d6aebce32d
- https://gist.github.com/rodnt/90ac26fdf891e602f6f090d6aebce32d
FAQ
What is CVE-2023-26877?
CVE-2023-26877 is a vulnerability with a CVSS score of 6.3 (MEDIUM). File upload vulnerability found in Softexpert Excellence Suite v.2.1 allows attackers to execute arbitrary code via a .php file upload to the form/efms_exec_html/file_upload_parser.php endpoint.
How severe is CVE-2023-26877?
CVE-2023-26877 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-26877?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.