CVE-2023-41505

EPSS 0.19%
Veröffentlicht 13.03.2024 21:15:53
Zuletzt bearbeitet 28.05.2025 18:40:07
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Code-projects ≫ Student Enrollment Version1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.19%	0.406

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://github.com/ASR511-OO7/CVE-2023-41505/blob/main/CVE-24

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-41505

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-41505

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-41505

EUVD