high8.8
CVE-2022-40878
In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution (RCE).
Impact
In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution (RCE).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Exam Reviewer Management System Project | Exam Reviewer Management System | Version 1.0 |