CVE-2023-53888 - Zomplog 3.9 Remote Code Execution via Authenticated File Manipulation

CVE ID : CVE-2023-53888 Published : Dec. 15, 2025, 9:15 p.m. | 18 minutes ago Description : Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload malicious JavaScript files, rename them to PHP, and execute system commands by exploiting the saveE and rename actions in the application. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor