CVE-2023-0918: codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload

Published Feb 19, 2023

Updated

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221494 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Pharmacy Management System Project Pharmacy Management System=1.0

Event History

Feb 19, 2023

CVE Published

08:19 AM

Data Sourced

08:19 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-0918?

The severity of CVE-2023-0918 is critical with a CVSS score of 9.8.

How does CVE-2023-0918 affect codeprojects Pharmacy Management System?

CVE-2023-0918 affects codeprojects Pharmacy Management System 1.0.

What is the component affected by CVE-2023-0918?

The component affected by CVE-2023-0918 is the Avatar Image Handler in codeprojects Pharmacy Management System 1.0.

Is the attack initiated remotely for CVE-2023-0918?

Yes, the attack for CVE-2023-0918 can be initiated remotely.

How can the unrestricted upload vulnerability in CVE-2023-0918 be exploited?

The unrestricted upload vulnerability in CVE-2023-0918 can be exploited by manipulating the add.php file.