Описание
Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using the image upload functionality, which is stored in /alumni/admin/assets/uploads/.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.htmlThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.htmlThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:simple_college_project:simple_college:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 88%
0.03804
Низкий
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-434
Связанные уязвимости
github
больше 3 лет назад
Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using the image upload functionality, which is stored in /alumni/admin/assets/uploads/.
EPSS
Процентиль: 88%
0.03804
Низкий
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-434