← All advisories

High severity8.8NVD Advisory· Published Aug 21, 2023· Updated Jul 9, 2026

CVE-2023-38836

CVE-2023-38836

Description

File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Boidcms/Boidcms3 versions
cpe:2.3:a:boidcms:boidcms:2.0.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:boidcms:boidcms:2.0.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =2.0.0

Patches

Vulnerability mechanics

References

2

github.com/BoidCMS/BoidCMS/issues/27nvdExploitIssue TrackingVendor Advisory
packetstormsecurity.com/files/175026/BoidCMS-2.0.0-Shell-Upload.htmlnvd

News mentions

0

No linked articles in our index yet.