CVE-2023-3061
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
A critical vulnerability was found in the Agro-School Management System version 1.0. This issue affects some unknown processing of the file btn_functions.php of the Attachment Image Handler component, leading to unrestricted file uploads.
Risk Assessment
An attacker may remotely exploit this vulnerability, posing a serious threat to the security of the system and user data.
Recommendation
It is recommended to immediately update the system to the latest version to eliminate this vulnerability and implement additional security measures regarding file uploads.
Original NVD description (English source)
A vulnerability was found in code-projects Agro-School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file btn_functions.php of the component Attachment Image Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-230567.