CVE-2024-11661
Codezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted upload
- State
- Published
- Severity
- 5.3 Medium
- Published
- Nov 25, 2024
- Updated
- Nov 25, 2024
- Reserved
- Nov 24, 2024
Description
A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file profile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The researcher submit confuses the vulnerability class of this issue.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L | VulDB |
| 2.0 | 4.0 Medium | AV:N/AC:L/Au:S/C:N/I:N/A:P | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Free Exam Hall Seating Management SystemCodezips |
|
References
- VDB-285982 | Codezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted uploadvdb-entrytechnical-description
- VDB-285982 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #447115 | Codezips Free Exam Hall Seating Management System In PHP with Source Code V1.0 SQL Injectionthird-party-advisory
- https://github.com/anqi12301/CVE/issues/1issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.