CVE-2023-5284: SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload

Published Sep 29, 2023

Updated

A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file uploadsavestudent.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240912.

Affected Software

1 affected component

Engineers Online Portal Project Engineers Online Portal=1.0

Event History

Sep 29, 2023

CVE Published

via MITRE·07:31 PM

Data Sourced

via MITRE·07:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-5284?

The severity of CVE-2023-5284 is high (8.8).

How does CVE-2023-5284 affect SourceCodester Engineers Online Portal 1.0?

CVE-2023-5284 affects an unknown function of the file upload_save_student.php in SourceCodester Engineers Online Portal 1.0.

What is the exploitability of CVE-2023-5284?

CVE-2023-5284 can be exploited remotely.

What is the Common Weakness Enumeration (CWE) of CVE-2023-5284?

The CWE of CVE-2023-5284 is CWE-434.

How can I fix CVE-2023-5284 in SourceCodester Engineers Online Portal 1.0?

To fix CVE-2023-5284, you should update the file upload_save_student.php in SourceCodester Engineers Online Portal 1.0 to prevent unrestricted upload.