CVE-2023-41505

An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2024-03-13

Last modified

2025-03-13

Weaknesses

CWE-434

Affected products

• Student Enrollment (Code-projects)
• Student Enrollment In Php (Code-projects)

References

• https://github.com/ASR511-OO7/CVE-2023-41505/blob/main/CVE-24