Vulnerability CVE-2023-4122
Published: 2023-12-07   Modified: 2023-12-14

Description:
Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.

Type:

CWE-434

 (Unrestricted Upload of File with Dangerous Type)

Affected software
Imsurajghosh -> Student information system 

 References:
https://fluidattacks.com/advisories/rubinstein/
https://www.kashipara.com/
Copyright 2024, cxsecurity.com

 

Back to Top