CVE-2020-28173

Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=savesettings when uploading a malicious file using the image upload functionality, which is stored in /alumni/admin/assets/uploads/...

CVE-2020-28173

Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=savesettings when uploading a malicious file using the image upload functionality, which is stored in /alumni/admin/assets/uploads/...

CVE-2020-28173

The CVE-2020-28173 entry relates to Sourcecodester Simple College Website 1.0. Affects the image upload workflow (upload to /alumni/admin/assets/uploads/) via /alumni/admin/ajax.php?action=save_settings, enabling remote code execution. Root cause is a vulnerable image upload function that permits...