CVE-2017-17593

Simple Chatting System 1.0 allows Arbitrary File Upload via view/myprofile.php, which places files under uploads/...

CVE-2017-17593

CVE-2017-17593 affects Simple Chatting System 1.0 (PHP-based). The vulnerability is an arbitrary file upload via the endpoint view/my_profile.php, which allows uploaded files to be placed under uploads/. Root cause: insufficient input validation on file uploads (as described across CNVD/NVD recor...

CVE-2017-17593

Simple Chatting System 1.0 allows Arbitrary File Upload via view/myprofile.php, which places files under uploads/...

Arbitrary file deletion

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...