CVE-2023-42286: Malicious File Upload
Published Mar 14, 2024
·Updated
There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands through a carefully crafted malicious payload.
Affected Software
2 affected components
Eyoucms Eyoucms
Eyoucms Eyoucms=1.6.4
Event History
Mar 14, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-42286?
CVE-2023-42286 has a high severity due to its potential for remote code execution.
2
How do I fix CVE-2023-42286?
To fix CVE-2023-42286, update your EyouCms installation to the latest version that patches this vulnerability.
3
What software is affected by CVE-2023-42286?
CVE-2023-42286 affects EyouCms version 1.6.4.
4
Can CVE-2023-42286 lead to data breaches?
Yes, due to its code execution capability, CVE-2023-42286 can potentially lead to data breaches.
5
How can I mitigate the risk of CVE-2023-42286?
To mitigate the risk of CVE-2023-42286, restrict file uploads and sanitize user inputs in your application.