CVE-2023-5185: Gym Management System Project v1.0 - Insecure File Upload
Gym Management System Project v1.0 is vulnerable to
an Insecure File Upload vulnerability on the 'file'
parameter of profile/i.php page, allowing an
authenticated attacker to obtain Remote Code Execution
on the server hosting the application.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for Gym Management System Project v1.0?
The vulnerability ID for Gym Management System Project v1.0 is CVE-2023-5185.
What is the severity of CVE-2023-5185?
The severity of CVE-2023-5185 is critical with a CVSS score of 8.8.
What is the affected software for CVE-2023-5185?
The affected software for CVE-2023-5185 is Gym Management System Project v1.0.
What is the vulnerability description of CVE-2023-5185?
CVE-2023-5185 is an Insecure File Upload vulnerability on the 'file' parameter of the profile/i.php page in Gym Management System Project v1.0, allowing an authenticated attacker to obtain remote code execution on the server hosting the application.
How do I fix the Insecure File Upload vulnerability in Gym Management System Project v1.0?
To fix the vulnerability, update Gym Management System Project v1.0 to a version that includes a secure file upload mechanism and ensure that file uploads are properly validated and restricted.