SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload

CVE-2023-5284

What is CVE-2023-5284?

A vulnerability has been identified in the Engineers Online Portal, specifically affecting the file upload_save_student.php functionality. This vulnerability allows attackers to upload files without proper restrictions, enabling the potential for malicious file execution. The flaw can be exploited remotely, posing significant risks to the integrity of the application and its data. The details of the exploit have been made public, increasing the urgency for mitigation and protection against such unauthorized actions.

References