PT-2026-68228 · Imranrisal Dev · Student Management System
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
imranrisal-dev Student-Management-System (affected versions not specified)
Description
A remote unrestricted upload issue exists within the Shared Upload Helper component. The problem occurs in the
storeProfileImage() function located in the student profile pic.php file. By manipulating the choose file argument, an attacker can upload files without proper restrictions.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, restrict access to the
storeProfileImage() function in the student profile pic.php file to minimize the risk of exploitation.Exploit
Unrestricted File Upload
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Student Management System