CVE-2024-34919

Critical

Published: 17/05/2024(UTC)Translated: 26/06/2026(UTC)NVD NIST

Summary

An arbitrary file upload vulnerability in the \modstudent\controller.php component of Pisay Online E-Learning System using PHP/MySQL v1.0 allows attackers to execute arbitrary code via uploading a crafted file.

Risk Assessment

The risk for the organization includes full server compromise, data theft, or further attacks on IT infrastructure.

Recommendation

It is recommended to immediately update the system to the latest version and implement file type validation and directory restrictions.

Original NVD description (English source)

An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System using PHP/MySQL v1.0 allows attackers to execute arbitrary code via uploading a crafted file.