CVE-2023-5185

CVSS 3.1 Score 9.1 of 10 (high)

Details

Published Sep 28, 2023
Updated: Sep 29, 2023
CWE ID 434

Summary

CVE-2023-5185 is a vulnerability affecting the Gym Management System Project v1.0. It is categorized as an Insecure File Upload vulnerability on the 'file' parameter of the profile/i.php page. This vulnerability allows an authenticated attacker to achieve Remote Code Execution on the server hosting the application. The risk score for this vulnerability is 65, with a base severity of CRITICAL and a base score of 9.1. The privileges required for exploitation are HIGH, and there is no user interaction necessary. The attack vector is through the network, and it has a high impact on both integrity and confidentiality. Remediation steps are not provided in the given information, but organizations using this Gym Management System version should take immediate action to address this vulnerability due to the potential danger it poses to their systems and data.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5185 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options