CVE-2024-54918

Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacheravatar.php...

CVE-2024-54918

creationtimestamp| type| source ---|---|--- 2024-12-09 18:30:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113624286043408920 2024-12-09 21:23:55+00:00| seen| https://t.me/cvedetector/12436...

CVE-2024-54918

Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacheravatar.php...

CVE-2024-54918

Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution (RCE) due to an unrestricted file upload vulnerability in the /teacher_avatar.php endpoint. An attacker can exploit this flaw by uploading arbitrary files to execute malicious code on the target system. No patch is...