CVE-2023-43958: Code Injection
An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated attacker to upload any file to the server and execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-43958?
CVE-2023-43958 is rated as critical due to its ability to allow unauthorized file uploads and arbitrary code execution.
How do I fix CVE-2023-43958?
To mitigate CVE-2023-43958, ensure that file upload features are securely configured, implementing strict file type validation and authentication requirements.
Who is affected by CVE-2023-43958?
Any installation of Hospital Management System version 4.0 that utilizes the /jquery-file-upload/server/php/index.php component is vulnerable to CVE-2023-43958.
What can an attacker do by exploiting CVE-2023-43958?
An attacker can upload any file to the server, potentially leading to the execution of arbitrary code and full compromise of the system.
Is CVE-2023-43958 an authenticated or unauthenticated vulnerability?
CVE-2023-43958 is an unauthenticated vulnerability, allowing attackers to exploit it without needing any user credentials.