| शीर्षक | ProjectsAndPrograms school-management-system v1.0 Unrestricted Upload |
|---|
| विवरण | During the security review of "school-management-system", I discovered a critical unauthenticated arbitrary file upload vulnerability in the "/assets/uploadSllyabus.php" file. This vulnerability stems from the absence of authentication checks, the lack of file type validation, and the storage of uploaded files in a web-accessible directory that executes PHP. Therefore, attackers can upload a malicious PHP file without logging in and trigger remote code execution by accessing the uploaded file. Immediate remedial measures are needed to ensure system security and protect data integrity. |
|---|
| स्रोत | ⚠️ https://github.com/ASantsSec/CVE/issues/24 |
|---|
| उपयोगकर्ता | asants (UID 85898) |
|---|
| सबमिशन | 03/07/2026 03:40 AM (3 महीनों पहले) |
|---|
| संयम | 31/08/2026 12:31 PM (2 months later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 328077 [ProjectsAndPrograms School Management System तक 6b6fae5426044f89c08d0dd101c7fa71f9042a59 uploadSllyabus.php file अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|