Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2023-4122

Student Information System v1.0 - Insecure File Upload

Description

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kashipara Group Student Information System

Default version status: unaffected

  • 1.0affected

References