CVE-2021-46013
Assigner: mitre
Published: 2022-01-18T17:57:35
State: PUBLISHED
affected: product: n/a
vendor: n/a
versions: status: affected
version: n/a
descriptions: value: An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web server. Once a php webshell containing "<?php system($_GET["cmd"]); ?>" gets uploaded it is saved into /uploads/exam_question/ directory, and is accessible by all users.
problemTypes: descriptions: description: n/a
type: text