CVE-2022-3436: A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown…

high7.5CVSS 3.1

AVNACLPRNUINSUCNIHAN

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210367.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sourcecodester	web-based_student_clearance_system	—	—
web-based_student_clearance_system_project	web-based_student_clearance_system	—	—