CVE-2024-6958: itsourcecode University Management System Avatar File st_update.php unrestricted upload
A vulnerability classified as critical was found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /stupdate.php of the component Avatar File Handler. The manipulation of the argument personalimage leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272080.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6958?
CVE-2024-6958 is classified as a critical vulnerability.
How does CVE-2024-6958 affect the University Management System?
CVE-2024-6958 affects the Avatar File Handler component, allowing for unrestricted upload of files.
What specific file is involved in CVE-2024-6958?
The vulnerability is found in the file /st_update.php.
How can I mitigate CVE-2024-6958?
Mitigation of CVE-2024-6958 can include implementing file upload restrictions and validating file types.
Which version of the University Management System is vulnerable to CVE-2024-6958?
CVE-2024-6958 affects version 1.0 of the University Management System.