CVE Catalog

CVE-2023-39776

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.93%

56th percentile - higher than 56% of all known CVEs

Summary

CVE-2023-39776 describes a vulnerability in PHPJabbers Ticket Support Script v3.2 that allows attackers to execute arbitrary code by uploading a crafted file.

Risk Assessment

This vulnerability can lead to remote code execution, posing a serious threat to the security of the system and user data.

Recommendation

It is recommended to update the script to the latest version and implement appropriate security measures for uploaded files.

Original NVD description (English source)

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS