NetSight
high7.2

CVE-2022-41533

Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/editProductImage.ph…

Impact

Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

VendorProductAffected versions
Online Diagnostic Lab Management System ProjectOnline Diagnostic Lab Management System
Version 1.0

Weakness classification

References