CVE-2023-41506

The Student Enrollment In PHP v1.0 system contains an arbitrary file upload vulnerability within the Update/Edit Student's Profile Picture (or Avatar) function. This flaw allows an attacker to upload a specially crafted PHP file , which can result in the execution of arbitrary code on the server....