Lucene search

Fluid AttacksVULNRICHMENT:CVE-2023-5185

HistorySep 28, 2023 - 8:52 p.m.

CVE-2023-5185 Gym Management System Project v1.0 - Insecure File Upload

2023-09-2820:52:35

CWE-434

Fluid Attacks

github.com

gym management system

insecure file upload

remote code execution

cve-2023-5185

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

7.2

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Gym Management System Project v1.0 is vulnerable to

an Insecure File Upload vulnerability on the ‘file’

parameter of profile/i.php page, allowing an

authenticated attacker to obtain Remote Code Execution

on the server hosting the application.

References

fluidattacks.com/advisories/orion

projectworlds.in/

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

7.2

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2023-5185