CVE-2021-25200

Name of the Vulnerable Software and Affected Versions: SourceCodester Learning Management System version 1.0

Description: The issue allows attackers to upload arbitrary files, which can lead to the execution of arbitrary code. This is achieved by uploading files to the student avatar.php script located in the lms directory.

Recommendations: For SourceCodester Learning Management System version 1.0, consider restricting access to the student avatar.php script until a fix is available, or remove the ability to upload files to this endpoint to prevent exploitation.