CVE-2026-112149 vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

CVE-2026-112149

The vraj404 Criminal-Management-System (up to commit 2808d057e7ddc5295519a487365b0cacfd0ba8c4 ) contains an unrestricted file upload vulnerability within the home.php file. The flaw exists in the move_uploaded_file function, where manipulating the my_img argument allows for unauthorized file uplo...