High severity8.8NVD Advisory· Published Dec 15, 2025· Updated May 26, 2026
CVE-2023-53888
CVE-2023-53888
Description
Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload files (such as JavaScript) and rename them to .php via the saveE and rename actions, then execute the resulting PHP payload to run system commands.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/51624nvdExploitThird Party AdvisoryVDB Entry
- www.vulncheck.com/advisories/zomplog-remote-code-execution-via-authenticated-file-manipulationnvdExploitThird Party Advisory
- web.archive.org/web/20080616153330/http://zomp.nl/zomplog/nvdProduct
News mentions
0No linked articles in our index yet.