CVE-2017-17593

Name of the Vulnerable Software and Affected Versions Simple Chatting System version 1.0

Description The issue allows for Arbitrary File Upload through the "view/my profile.php" endpoint, which stores uploaded files in the "uploads/" directory.

Recommendations For Simple Chatting System version 1.0, consider restricting access to the "view/my profile.php" endpoint to prevent unauthorized file uploads until a patch is available. As a temporary workaround, restrict write access to the "uploads/" directory to minimize the risk of exploitation.