all InfoSec news logo
all InfoSec news - Your InfoSec news aggregator
Log in Sign up
all InfoSec news

BoidCMS 2.0.0 Command Injection

Add to bookmarks
March 1, 2024, 4:21 p.m. |

Packet Storm packetstormsecurity.com

This Metasploit module leverages CVE-2023-38836, an improper sanitization bug in BoidCMS versions 2.0.0 and below. BoidCMS allows the authenticated upload of a php file as media if the file has the GIF header, even if the file is a php file.

bug command command injection cve file gif header injection media metasploit php upload

Visit resource

More from packetstormsecurity.com / Packet Storm

RansomLord Anti-Ransomware Exploit Tool 3.1 1 day, 12 hours ago | packetstormsecurity.com
anti-ransomware compromise concept dll +13
Red Hat Security Advisory 2024-3527-03 1 day, 13 hours ago | packetstormsecurity.com
advisory buffer buffer overflow customer +16
Red Hat Security Advisory 2024-3513-03 1 day, 13 hours ago | packetstormsecurity.com
advisory code code execution enterprise +8
Red Hat Security Advisory 2024-3501-03 1 day, 13 hours ago | packetstormsecurity.com
advisory denial of service enterprise issues +7
Red Hat Security Advisory 2024-3500-03 1 day, 13 hours ago | packetstormsecurity.com
advisory denial of service enterprise http +10
Red Hat Security Advisory 2024-3497-03 1 day, 13 hours ago | packetstormsecurity.com
advisory buffer buffer overflow buffer overflow vulnerability +10
Packet Storm New Exploits For May, 2024 1 day, 13 hours ago | packetstormsecurity.com
archive exploits may packet +2
Ubuntu Security Notice USN-6804-1 1 day, 13 hours ago | packetstormsecurity.com
attacker buffer buffer overflow cache +16
Ubuntu Security Notice USN-6803-1 1 day, 13 hours ago | packetstormsecurity.com
arbitrary code arbitrary code execution attacker code +16

Jobs in InfoSec / Cybersecurity

Post a Job Search Talent

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland
View on infosec-jobs.com

Cyber Security Strategy Consultant

@ Capco | New York City
View on infosec-jobs.com

Cyber Security Senior Consultant

@ Capco | Chicago, IL
View on infosec-jobs.com

Sr. Product Manager

@ MixMode | Remote, US
View on infosec-jobs.com

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote
View on infosec-jobs.com

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC
View on infosec-jobs.com