Ingenious 2.3.0 - Arbitrary File Upload

Ingenious 2.3.0 - Arbitrary File Upload Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

CVE-2017-15957

CVE-2017-15957 affects Ingenious School Management System 2.3.0: the file my_profile.php allows a student or teacher to upload an arbitrary file. Public references (Exploit-DB, 0day) document an arbitrary file upload capability, with PoCs targeting the my_profile.php and uploads paths. The vulner...