CVE-2023-24317

HighCVSS 8.1

Published: 23/02/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.39%

69th percentile - higher than 69% of all known CVEs

Summary

Judging Management System 1.0 was found to have an arbitrary file upload vulnerability via the edit_organizer.php component. An attacker can upload a malicious file, potentially leading to remote code execution.

Risk Assessment

The risk for the organization includes potential server compromise, data theft, or further attacks on IT infrastructure.

Recommendation

It is recommended to immediately update the system to the latest version and implement file type validation and size restrictions in the upload functionality.

Other vulnerabilities in Judging Management System

CVE-2023-37682Critical
A SQL injection vulnerability was discovered in Judging Management System v1.0 via the id parameter in /php-jms/deductScores.php.

Original NVD description (English source)

Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component edit_organizer.php.