| 제목 | SourceCodester Student Result Management System (SRMS) 1.0 Path Traversal |
|---|
| 설명 | A vulnerability was found in SourceCodester Student Result Management System 1.0. The file /admin/core/drop_student.php does not properly sanitize the user-supplied 'img' parameter from a GET request before passing it to the unlink() function.
This allows an authenticated attacker to inject path traversal sequences (e.g., ../) to delete arbitrary files outside the intended images/students/ directory.
The vulnerability is particularly critical because it can be exploited via a single crafted GET request without requiring file upload, making exploitation trivial.
This issue represents an additional attack vector compared to previously reported vulnerabilities in the application, which require POST requests and file upload functionality.
Despite similar previously reported issues, this vulnerability introduces a distinct attack vector via a GET request without requiring file upload, significantly reducing exploitation complexity and increasing practical risk. |
|---|
| 원천 | ⚠️ https://github.com/Xmyronn/cve-srms-drop-student-path-traversal |
|---|
| 사용자 | imad alvi (UID 97088) |
|---|
| 제출 | 2026. 04. 04. AM 01:15 (6 개월 ago) |
|---|
| 모더레이션 | 2026. 04. 12. PM 08:12 (9 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 309022 [SourceCodester Student Result Management System 1.0 drop_student.php img 디렉토리 순회] |
|---|
| 포인트들 | 0 |
|---|