CVE-2023-5636

Affected software: ArslanSoft Education Portal (before v1.1). Vulnerability type: Unrestricted Upload of File with Dangerous Type leading to Command Injection via file upload. Root cause / impact: Unrestricted file upload allows attacker to place and execute a dangerous file, enabling command exe...

CVE-2023-5637

ArslanSoft Education Portal (before v1.1) is affected by CVE-2023-5637 due to an Unrestricted Upload of File with Dangerous Type vulnerability, which allows reading sensitive strings within an executable. The issue is described as a code issue in the Education Portal prior to v1.1. Exploitation d...

CVE-2023-5635

The CVE-2023-5635 entry affects ArslanSoft Education Portal versions prior to 1.1, where improper protection of outbound error messages and alert signals enables account footprinting. This is documented across multiple sources, including NVD and related advisories, which indicate the vulnerabilit...

CVE-2023-5634

The CVE-2023-5634 entry applies to ArslanSoft Education Portal. Affects Education Portal components handling SQL queries prior to version 1.1. Root cause is improper neutralization of special elements in SQL commands (SQL Injection). Reported impact includes high confidentiality, integrity, and a...