CVE-2023-53871
Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic
- State
- Published
- Severity
- 6.9 Medium
- Published
- Dec 15, 2025
- Updated
- Apr 7, 2026
- Reserved
- Dec 13, 2025
Description
Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
Weaknesses
- CWE-434 Unrestricted Upload of File with Dangerous Type
Affected Products
| Product | Versions |
|---|---|
SoosyzeSoosyze |
|
References
- ExploitDB-51718exploit
- soosyze Product Homepageproduct
- soosyze GitHub Repositoryproduct
- VulnCheck Advisory: Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logicthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.