CVE-2023-53921
CriticalSummary
SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands.
Risk Assessment
This vulnerability could lead to complete compromise of the application and server, posing a critical security threat.
Recommendation
It is recommended to immediately update the system to a patched version and to implement file type and permission controls.
Original NVD description (English source)
SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands.