| शीर्षक | https://oranbyte.com ProjectsAndPrograms/school-management-system 1.0 Unauthenticated Arbitrary File Upload to RCE |
|---|
| विवरण | An unauthenticated arbitrary file upload vulnerability exists in the editNotes.php component of the School Management System. The endpoint fails to implement any authentication checks and does not properly validate uploaded files, allowing remote attackers to upload a malicious PHP script directly to the web server. This leads to remote code execution (RCE) with the privileges of the web server user. |
|---|
| स्रोत | ⚠️ https://github.com/qqy-123/cve/issues/1 |
|---|
| उपयोगकर्ता | yuc1 (UID 90796) |
|---|
| सबमिशन | 30/09/2025 11:29 AM (7 महीनों पहले) |
|---|
| संयम | 12/10/2025 08:37 AM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 328073 [ProjectsAndPrograms School Management System तक 6b6fae5426044f89c08d0dd101c7fa71f9042a59 /assets/editNotes.php Arquivo अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|