Skip to content
OpenAdvisories
Critical · 9.1 CVE-2023-1721 EUVD-2023-23944GHSA-fm2j-6967-6fqw

Yoga Class Registration System 1.0 - RCE

Published Jun 23, 2023 · Updated Nov 27, 2024 · Assigned by Fluid Attacks

Description

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

Affected products

VendorProductAffectedFixed
Yoga Class Registration System Yoga Class Registration System 1.0 —

References