CVE-2023-5185 — Gym Management System Project v1.0 - Insecure File Upload
Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'file' parameter of profile/i.php page, allowing an authenticated attacker to…
Published: 2023-09-28 · CVSS: 9.1 · CVSS 3.1
Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'file' parameter of profile/i.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7