Approved changes feed: RSS · Atom

cpe:2.3:a:sitemagic:sitemagic_cms:4.4.3:*:*:*:*:*:*:*

part: a version: 4.4.3 update: *

VendorSitemagic (babf1c6b-4bc2-5f6e-a6c5-b1e267419ecb)
ProductSitemagic Cms (9465efbe-7871-5fc6-96ab-0f44c8206520)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jemt/sitemagiccms purl2cpe 2026-06-01 10:12:29.988106

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-53921 vulnerable 2026-06-08 06:19:40.014619 SitemagicCMS 4.4.3 Remote Code Execution via Unrestricted File Upload
CRITICAL (9.8)
SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands.
Published: 2025-12-17T22:44:53.262Z
Updated: 2026-04-07T14:07:43.551Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.