CVE-2021-45348

Name of the Vulnerable Software and Affected Versions SourceCodester Attendance Management System version 1.0

Description An Arbitrary File Deletion issue exists via the csv parameter in "admin/pageUploadCSV.php", which can cause a Denial of Service (crash).

Recommendations For SourceCodester Attendance Management System version 1.0, consider restricting access to the "admin/pageUploadCSV.php" endpoint to minimize the risk of exploitation. As a temporary workaround, avoid using the csv parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.