Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-1728

Unrestricted Upload of File with Dangerous Type in Fernus LMS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TR-CERT

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection. This issue affects LMS: before 23.04.03.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fernus Informatics LMS

Default version status: unaffected

  • 0 to < 23.04.03affected

References