PT-2023-14690
CVE-2022-45527
·
تاريخ النشر
2023-02-08
·
تاريخ التحديث
2025-03-25
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Future-Depth Institutional Management Website (IMS) version 1.0
Description
The issue allows unauthorized attackers to directly upload malicious files to the courseimg directory. This is a result of a file upload vulnerability in the software.
Recommendations
For Future-Depth Institutional Management Website (IMS) version 1.0, consider restricting access to the courseimg directory to prevent unauthorized file uploads until a patch is available. As a temporary workaround, disabling the file upload feature can help minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾