CVE-2023-41505

EPSS 0.19%
Published 13.03.2024 21:15:53
Last modified 28.05.2025 18:40:07
Source cve@mitre.org
Teams watchlist Login
Open Login

An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Code-projects ≫ Student Enrollment Version1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.19%	0.406

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://github.com/ASR511-OO7/CVE-2023-41505/blob/main/CVE-24

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-41505

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-41505

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-41505

EUVD