CVE-2023-50760 — Online Notice Board System v1.0 - Insecure File Upload
Online Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of user/update_profile_pic.php page, allowing an authenticated attack…
Published: 2024-01-04 · CVSS: 8.8 · CVSS 3.1
Online Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of user/update_profile_pic.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7