Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68366
HistorySep 29, 2022 - 12:00 a.m.

Simple Exam Reviewer Management System Arbitrary File Upload Vulnerability

2022-09-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
vulnerability
file upload
authentication
remote execution

EPSS

0.012

Percentile

85.6%

Simple Exam Reviewer Management System is a simple examiner management system. version 1.0 of Simple Exam Reviewer Management System is vulnerable to arbitrary file uploads, which stem from the lack of valid authentication of uploaded files on the configuration file page. An authenticated attacker could exploit this vulnerability to upload malicious files and remotely execute arbitrary code.

EPSS

0.012

Percentile

85.6%