CVE-2023-37152

CriticalCVSS 9.8

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.67%

74th percentile - higher than 74% of all known CVEs

Summary

Projectworlds Online Art Gallery Project version 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. There is a dispute regarding the validity of this vulnerability.

Risk Assessment

The ability for unauthenticated users to upload arbitrary files poses a risk of malware introduction or data leakage.

Recommendation

It is recommended to implement authentication for file upload operations and to thoroughly check and validate uploaded files.

Original NVD description (English source)

Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. Note: This has been disputed as not a valid vulnerability.