CVE-2021-25210

Name of the Vulnerable Software and Affected Versions: SourceCodester Alumni Management System version 1.0

Description: The issue allows attackers to execute arbitrary code through an arbitrary file upload vulnerability. This is achieved by uploading a file to the manage event.php API endpoint.

Recommendations: For SourceCodester Alumni Management System version 1.0, consider disabling the file upload functionality to the manage event.php endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation.