CVE-2023-53962 | SOUND4 WM2 up to 2.x upload.cgi upgfile path traversal (Exploit 51172 / EDB-51172)

December 23, 2025 Yanac

A vulnerability was found in SOUND4 Impact, Pulse, First, Pulse Eco, BigVoice4, BigVoice2, Stream and WM2 up to 2.x and classified as critical. This affects an unknown function of the file upload.cgi. Such manipulation of the argument upgfile leads to path traversal.

This vulnerability is documented as CVE-2023-53962. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More