Description
A vulnerability, which was classified as critical, was found in code-projects Staff Audit System 1.0. Affected is an unknown function of the file /test.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | Staff Audit System | 1.0 | — |
References
- VDB-315120 | code-projects Staff Audit System test.php unrestricted upload vdb-entry technical-description
- VDB-315120 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #606917 | code-projects STAFF AUDIT SYSTEM IN PHP 1 arbitrary file upload third-party-advisory
- https://github.com/kn1g78/cve/blob/main/staff2/staff2.md exploit
- https://code-projects.org/ product