CVE-2022-39179 — College Management System v1.0 - Authenticated remote code execution
College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) c…
Published: 2022-11-17 · CVSS: 7.2 · CVSS 3.1
College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7