PT-2017-14310

CVE-2017-15957

·

Published

2017-10-29

·

Updated

2017-11-17

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Ingenious School Management System version 2.3.0
Description The issue allows a student or teacher to upload an arbitrary file through the my profile.php script.
Recommendations For Ingenious School Management System version 2.3.0, restrict access to the my profile.php script to prevent arbitrary file uploads until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-434: Unrestricted Upload of File with Dangerous Type
Related identifiers
CVE-2017-15957
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com