CVE-2023-1721

CVSS V2 None CVSS V3 None
Description
Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.
Overview
  • CVE ID
  • CVE-2023-1721
  • Assigner
  • Fluid Attacks
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-06-23T23:02:38.582Z
  • Last Modified Date
  • 2023-06-23T23:02:38.582Z
Weakness Enumerations
CWE URL
CWE-434 http://cwe.mitre.org/data/definitions/434.html
References
Reference URL Reference Tags
https://fluidattacks.com/advisories/blessd/
https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-1721
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1721
History
Created Old Value New Value Data Type Notes
2024-06-25 08:43:41 Added to TrackCVE