CVE-2023-53923 — UliCMS 2023.1 Privilege Escalation via Unauthenticated Admin Account Creation
UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create administrative accounts through the UserController endpoint. Attacker…
Published: 2025-12-17 · CVSS: 9.3 · CVSS 4.0
UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create administrative accounts through the UserController endpoint. Attackers can send a crafted POST request to /dist/admin/index.php with specific parameters to generate a new admin user with full system access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7