Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2023-5185

Gym Management System Project v1.0 - Insecure File Upload

Description

Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'file' parameter of profile/i.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gym Management System Project Gym Management System Project

Default version status: unaffected

  • 1.0affected

References