CVE-2021-25200

2021-07-2816:01:18

mitre

www.cve.org

arbitrary file upload

sourcecodester

learning management system

execute arbitrary code

file upload

student avatar.

AI Score

9.8

Confidence

High

EPSS

0.008

Percentile

81.9%

JSON

Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\student_avatar.php.

References

github.com/TCSWT/Learning-Management-System/blob/main/README.md