CVE-2026-37748

The Visitor Management System 1.0 by sanjay1313 is vulnerable to an Unrestricted File Upload flaw in the vms/php/admin_user_insert.php and vms/php/update_1.php files. The root cause is that the move_uploaded_file() function is executed without validating the MIME type , file extension , or conten...