Description
A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/student_controller.php. Such manipulation of the argument new_image leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 1000projects | Online Student Project Report Submission and Evaluation System | 1.0 | — |
References
- VDB-323859 | 1000projects Online Student Project Report Submission and Evaluation System student_controller.php unrestricted upload vdb-entry technical-description
- VDB-323859 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #647175 | 1000projects.org Online Student Project Report Submission and Evaluation System v1.0 File unrestricted upload third-party-advisory
- Submit #647177 | 1000projects.org Online Student Project Report Submission and Evaluation System PHP Project v1.0 File unrestricted upload (Duplicate) third-party-advisory
- https://github.com/lan041221/cvec/issues/23 exploit issue-tracking