CVE Catalog

CVE-2023-37165

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.66%

74th percentile - higher than 74% of all known CVEs

Summary

Version 1.414 of Millhouse-Project was found to contain a remote code execution (RCE) vulnerability via the component /add_post_sql.php.

Risk Assessment

This vulnerability could allow attackers to execute code remotely on the server, posing a serious security threat to the system.

Recommendation

It is recommended to update to the latest version of Millhouse-Project and monitor logs for potential exploitation attempts.

Original NVD description (English source)

Millhouse-Project v1.414 was discovered to contain a remote code execution (RCE) vulnerability via the component /add_post_sql.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS