CVE-2023-53869
WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Execution
- State
- Published
- Severity
- 8.7 High
- Published
- Dec 15, 2025
- Updated
- Apr 7, 2026
- Reserved
- Dec 13, 2025
Description
WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media function. Attackers can leverage any created account to upload malicious PHP scripts that enable remote code execution on the application server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
Weaknesses
- CWE-434 Unrestricted Upload of File with Dangerous Type
Affected Products
| Product | Versions |
|---|---|
WebIGniterWebIGniter |
|
References
- ExploitDB-51736exploit
- Webigniter Product Webpageproduct
- VulnCheck Advisory: WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Executionthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.