CVE-2023-41506

An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2024-02-27

Last modified

2024-08-27

Weaknesses

CWE-434

Affected products

• Student Enrollment (Code-projects)
• Student Enrollment (Php)

References

• https://github.com/ASR511-OO7/CVE-2023-41506/blob/main/CVE-23