critical9.8
CVE-2021-25200
Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\…
Impact
Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\student_avatar.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Learning Management System Project | Learning Management System | Version 1.0 |