| शीर्षक | SourceCodester Student Result Management System 1.0 Path Traversal |
|---|
| विवरण | User can delete files through `academic/core/drop_student.php`. Users must authenticate with valid credentials to access the system. A vulnerability exists in the file deletion functionality where improper validation of the `img` parameter allows attackers to perform path traversal. By manipulating the parameter value, authenticated users can delete arbitrary files on the server, including critical system files, potentially leading to denial of service or further exploitation. |
|---|
| स्रोत | ⚠️ https://github.com/Xiaoyi-ing/CVE/issues/4 |
|---|
| उपयोगकर्ता | me1ody (UID 84857) |
|---|
| सबमिशन | 02/05/2025 09:53 AM (1 वर्ष पहले) |
|---|
| संयम | 15/05/2025 09:00 AM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 309022 [SourceCodester Student Result Management System 1.0 drop_student.php img निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|