CVE-2021-25200

Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\studentavatar.php...

CVE-2021-25200

Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\studentavatar.php...

CVE-2021-25200

CVE-2021-25200 represents an arbitrary file upload vulnerability in SourceCodester Learning Management System v1.0. The flaw allows an attacker to upload to lms/student_avatar.php, enabling arbitrary code execution. Affected product: SourceCodester LMS 1.0. Root cause: improper validation of file...