CVE-2022-3436: SourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted upload
A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210367.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3436?
CVE-2022-3436 is classified as a critical vulnerability.
How does CVE-2022-3436 affect the SourceCodester Web-Based Student Clearance System?
CVE-2022-3436 affects the file edit-photo.php of the Photo Handler component, leading to unrestricted file uploads.
What type of attacks can exploit CVE-2022-3436?
CVE-2022-3436 can be exploited to upload malicious files, potentially allowing an attacker to execute arbitrary code.
What systems are impacted by CVE-2022-3436?
CVE-2022-3436 impacts the SourceCodester Web-Based Student Clearance System version 1.0.
How do I fix CVE-2022-3436?
To fix CVE-2022-3436, it is recommended to implement file upload restrictions and sanitize inputs in the Photo Handler component.