NetSight
critical9.8

CVE-2023-41506

An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbi…

Impact

An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products

VendorProductAffected versions
Code-ProjectsStudent Enrollment
Version 1.0

Weakness classification

References