CVE-2023-5636

Critical

Published: 01/12/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The vulnerability in ArslanSoft Education Portal allows unrestricted file uploads of dangerous types, leading to command injection.

Risk Assessment

The organization may be exposed to attacks that could result in system takeover or data leakage.

Recommendation

It is recommended to update the Education Portal to version 1.1 or later and implement mechanisms to restrict the upload of dangerous file types.

Original NVD description (English source)

Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Command Injection. This issue affects Education Portal: before v1.1.