Description
A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/faculty_controller.php. This manipulation of the argument new_image causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 1000projects | Online Student Project Report Submission and Evaluation System | 1.0 | — |
References
- VDB-323858 | 1000projects Online Student Project Report Submission and Evaluation System faculty_controller.php unrestricted upload vdb-entry technical-description
- VDB-323858 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #647173 | 1000projects.org Online Student Project Report Submission and Evaluation System v1.0 File unrestricted upload third-party-advisory
- Submit #647176 | 1000projects.org Online Student Project Report Submission and Evaluation System PHP Project v1.0 File unrestricted upload (Duplicate) third-party-advisory
- https://github.com/lan041221/cvec/issues/22 exploit issue-tracking