CVE-2023-4122 — Student Information System v1.0 - Insecure File Upload
Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain …
Published: 2023-12-07 · CVSS: 9.9 · CVSS 3.1
Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7