Unrestricted file upload

2022-01-1818:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.8%

JSON

An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web server. Once a php webshell containing “<?php system($_GET[“cmd”]); ?>” gets uploaded it is saved into /uploads/exam_question/ directory, and is accessible by all users.

CPENameOperatorVersion
free_school_management_softwareeq1.0

CPE	Name	Operator	Version
	free_school_management_software	eq	1.0

References

www.exploit-db.com/exploits/50587