CVE-2023-37629

Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php."

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

23.49% chance of exploitation in the next 30 days, 98th percentile

Nuclei

critical · CWE-434

Published

2023-07-12

Updated

2024-11-07

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/173656/Online-Piggery-Management-System-1.0-Shell-Up…
• 1337kid/Piggery_CMS_multiple_vulns_PoC0★ · 2023-09-13

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37629.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51598

Security advisories

• 1337kid/Piggery_CMS_multiple_vulns_PoC/tree/main/CVE-2023-37629
• https://www.sourcecodester.com/php/11814/online-pig-management-system-basic-free-version…

References

• CVE Record
• NVD entry

Related

• CVE-2023-37628
• CVE-2023-37630
• CVE-2023-38836