What’s Vulnerable › Vulnerabilities

CVE-2023-53924: UliCMS 2023.1-sniffing-vicuna Remote Code Execution via Avatar Upload

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-17 · updated 2026-06-17
• Weakness: CWE-434

Description

UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar upload. Attackers can trigger code execution by visiting the uploaded file's location, enabling system command execution through maliciously crafted avatar uploads.

Affected products

• Ulicms: 2023.1

References

• https://web.archive.org/web/20230314183734/https://en.ulicms.de/
• https://www.exploit-db.com/exploits/51434
• https://www.vulncheck.com/advisories/ulicms-sniffing-vicuna-remote-code-execution-via-avatar-upload
• https://www.exploit-db.com/exploits/51434

Get alerted when CVE-2023-53924 or the next vulnerability affects your stack