Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-1467

SourceCodester Student Study Center Desk Management System POST Parameter path traversal

Description

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=delete_img of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223326 is the identifier assigned to this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SourceCodester Student Study Center Desk Management System

  • 1.0affected

References