CVE-2023-50760

Summary

CVE-2023-50760 is a newly identified vulnerability affecting the Online Notice Board System v1.0. This issue allows authenticated attackers to exploit an Insecure File Upload vulnerability on the 'f' parameter of user/update_profile_pic.php page, enabling them to execute remote code on the server hosting the application. The vulnerability poses a significant risk, as attackers can gain unrestricted access to the server and potentially cause extensive damage. Users are strongly advised to update their systems as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.