CVE-2023-53981

CVE-2023-53981 describes a remote code execution (RCE) vulnerability in PhotoShow 3.0, specifically affecting the thibaud-rohmer photoshow product. Authenticated administrators can inject malicious commands via the exiftran path configuration, enabling attackers to execute base64-encoded reverse shell commands through crafted video uploads leveraging ffmpeg settings. This vulnerability carries a CVSS score of 7.2 (HIGH), indicating a high-impact threat with complete compromise of confidentiality, integrity, and availability, requiring high privileges but no user interaction. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.