CVE-2023-36319: Openupload Project Openupload

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action parameter of the compress-inc.php file.

Affected products

• Openupload Project Openupload: version 0.4.3 only

Published 2023-09-20. Last modified 2026-06-17.