CVE-2023-5919

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /dashboard/createblog of the component Create Blog Page. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-244310 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Nov 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-59203.3Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to reaCVE-2023-59217.1Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issue affects Geodi: befCVE-2023-59227.5The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via an AJAX action (and RCVE-2023-59237.5A vulnerability classified as critical has been found in Campcodes Simple Student Information System 1.0. This affects an unknown part of thCVE-2023-59247.5A vulnerability classified as critical was found in Campcodes Simple Student Information System 1.0. This vulnerability affects unknown codeCVE-2023-59257.5A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects somCVE-2023-59267.5A vulnerability, which was classified as critical, was found in Campcodes Simple Student Information System 1.0. Affected is an unknown funcCVE-2023-59277.5A vulnerability has been found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this vulnerabilityCVE-2023-59287.5A vulnerability was found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this issue is some unknCVE-2023-59297.5A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown paCVE-2023-59306.1A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This vulnerability affectCVE-2023-59318.8The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow a
CVE-2023-5919: High severity, CVSS 7.2 | Vulnix