CVE-2023-1728

Critical

Published: 04/04/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The vulnerability in Fernus Informatics LMS allows unrestricted upload of files with dangerous types, potentially leading to OS Command Injection and Server Side Include (SSI) Injection.

Risk Assessment

Exploitation of this vulnerability could lead to serious security breaches, including server takeover and exposure of sensitive data.

Recommendation

It is recommended to update the LMS to version 23.04.03 or later to mitigate this vulnerability.

Original NVD description (English source)

Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection. This issue affects LMS: before 23.04.03.