EDB-52409

PoC

Ghost CMS 5.59.1 - Arbitrary File Read

view exploit source exploit_dbtype webappsauthor İbrahimsqlpublished 2025-08-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-40028USmedium6.5Exploit
Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan