CVE-2023-6887

A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248247.

• CWE-434

• https://github.com/daydust/vuln/blob/main/ForestBlog/Arbitrary_File_Upload_Vulnerability.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.248247Permissions Required
• https://vuldb.com/?id.248247Third Party Advisory
• https://github.com/daydust/vuln/blob/main/ForestBlog/Arbitrary_File_Upload_Vulnerability.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.248247Permissions Required
• https://vuldb.com/?id.248247Third Party Advisory

Published

Dec 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6881Possible buffer overflow in is_mount_point9.8
• CVE-2023-6882The Simple Membership plugin for WordPress is vulnerable to …6.1
• CVE-2023-6883The Easy Social Feed plugin for WordPress is vulnerable to u…4.3
• CVE-2023-6884This plugin for WordPress is vulnerable to Stored Cross-Site…5.4
• CVE-2023-6885A vulnerability was found in Tongda OA 2017 up to 11.10. It …9.8
• CVE-2023-6886A vulnerability was found in xnx3 wangmarket 6.1. It has bee…9.8
• CVE-2023-6888A vulnerability classified as critical was found in PHZ76 Rt…9.8
• CVE-2023-6889Cross-site Scripting (XSS) - Stored in GitHub repository tho…5.4
• CVE-2023-6890Cross-site Scripting (XSS) - Stored in GitHub repository tho…5.4
• CVE-2023-6891A vulnerability has been found in PeaZip 9.4.0 and classifie…7.8
• CVE-2023-6892The EAN for WooCommerce plugin for WordPress is vulnerable t…5.4
• CVE-2023-6893A vulnerability was found in Hikvision Intercom Broadcasting…7.5