CVE-2025-7190: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affects an unknown part of the file /admin/studenteditphoto.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

CVE-2024-33294

An issue in Library System using PHP/MySQli with Source Code V1.0 allows a remote attacker to execute arbitrary code via the FAILE variable in the studenteditphoto.php component...

CVE-2024-33294

An issue in Library System using PHP/MySQli with Source Code V1.0 allows a remote attacker to execute arbitrary code via the FAILE variable in the studenteditphoto.php component...

CVE-2024-33294

The Library System (using PHP/MySQli with Source Code) version V1.0 is vulnerable to remote code execution . An attacker can exploit an issue involving the _FAILE variable within the student_edit_photo.php component. The impact is critical, allowing for arbitrary code execution. As a remediation,...

CVE-2024-33294: Improper Control of Generation of Code

An issue in Library System using PHP/MySQli with Source Code V1.0 allows a remote attacker to execute arbitrary code via the FAILE variable in the studenteditphoto.php component...