CyberSec.Space Logo
Back to CVE Browser

CVE-2023-53980

HIGH
8.7
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-12-22
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious files by manipulating file extensions. Attackers can upload shell scripts with disguised extensions through the upload.process.php endpoint to execute arbitrary commands on the server.

Affected Platforms (CPE)

📦
Projectsend

Projectsend

= r1605

References & Advisories

🔗 https://www.exploit-db.com/exploits/51238
🔗 https://www.projectsend.org/
🔗 https://www.vulncheck.com/advisories/projectsend-remote-code-execution-via-file-extension-manipulation
🔗 https://www.exploit-db.com/exploits/51238

Related Vulnerabilities

CVE-2021-479475.1

Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scr...

CVE-2026-56242.1

A security flaw has been discovered in ProjectSend r2002. This vulnerability affects unknown code of the file upload.php. Performi...

CVE-2023-539307.1

ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download pri...

CVE-2023-539065.1

projectSend r1605 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject maliciou...