CVE-2022-3436
A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210367.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cna@vuldb.com
- Published
- 2022-10-09
- Last modified
- 2024-08-03
- Weaknesses
- CWE-266, CWE-434
Affected products
- Web-based Student Clearance System (Sourcecodester)
- Web-based Student Clearance System (Web-based Student Clearance System Project)
References
- http://packetstormsecurity.com/files/176007/Online-Student-Clearance-System-1.0-Shell-Upload.html
- https://vuldb.com/?id.210367