Security Advisory

CVE-2023-53868

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-15 20:22:36
Last updated 2026-04-07 14:06:55
Assigner VulnCheck
State PUBLISHED

Description

Coppermine Gallery 1.6.25 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the plugin manager. Attackers can upload a zipped PHP file with system commands to the plugin directory and execute arbitrary code by accessing the uploaded plugin script.