提交 #781791: ProjectsAndPrograms school-management-system 1 File Upload / RCE信息

标题ProjectsAndPrograms school-management-system 1 File Upload / RCE
描述An authenticated file upload vulnerability exists in the School Management System that allows users with Admin or Teacher roles to upload arbitrary files, which can be executed on the server, leading to Remote Code Execution (RCE).
来源⚠️ https://github.com/sudo-secure/security-research/blob/main/school-management-system/file-upload-rce/PoC.md
用户
 sudosme (UID 96548)
提交2026-03-17 16時23分 (7 月前)
管理2026-04-03 09時40分 (17 days later)
状态已接受
VulDB条目355076 [ProjectsAndPrograms School Management System 直到 6b6fae5426044f89c08d0dd101c7fa71f9042a59 Profile Picture settings.php 权限提升]
积分16

Do you want to use VulDB in your project?

Use the official API to access entries easily!