CVE-2023-33253

State: Published
Severity: Not scored
Published: Jun 12, 2023
Updated: Jan 3, 2025
Reserved: May 21, 2023

Description

LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file (such as shell.jpg.php.shell) being sent.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://labcollector.com/
https://github.com/Toxich4/CVE-2023-33253
https://labcollector.com/changelog-labcollector/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.