CVE-2021-42669

CVE-2021-42669 CVE-2021-42669 - Ejecución remota de código mediante vulnerabilidad de carga de archivos sin restricciones en el sistema de portal en línea de ingenieros. Descripción técnica: Existe una vulnerabilidad de carga de archivos sin restricciones en el sistema de Portal en Línea de...

CVE-2024-54918: Unrestricted Upload of File with Dangerous Type

Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacheravatar.php...

CVE-2024-54919: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS was found in /teacheravatar.php of kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary java script via the filename parameter...

CVE-2021-42669: Unrestricted Upload of File with Dangerous Type

A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboardteacher.php, which allows changing the avatar through teacheravatar.php. Once an avatar gets uploaded it is getting uploaded to the /admin/uploads/ directory, and is accessible by all users. By...