| Titre | ProjectsAndPrograms school-management-system 1 File Upload / RCE |
|---|
| Description | An authenticated file upload vulnerability exists in the School Management System that allows users with Admin or Teacher roles to upload arbitrary files, which can be executed on the server, leading to Remote Code Execution (RCE). |
|---|
| La source | ⚠️ https://github.com/sudo-secure/security-research/blob/main/school-management-system/file-upload-rce/PoC.md |
|---|
| Utilisateur | sudosme (UID 96548) |
|---|
| Soumission | 17/03/2026 16:23 (il y a 7 mois) |
|---|
| Modérer | 03/04/2026 09:40 (17 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 355076 [ProjectsAndPrograms School Management System Profile Picture settings.php élévation de privilèges] |
|---|
| Points | 16 |
|---|