Description
Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection.
This issue affects LMS: before 23.04.03.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fernus Informatics | LMS | < 23.04.03 | 23.04.03 |
References
- https://www.usom.gov.tr/bildirim/tr-23-0194 government-resource broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0194 government-resource