CVE-2023-1722

CVSS V2 None CVSS V3 None

Description

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

Overview

CVE ID
CVE-2023-1722

Assigner
Fluid Attacks

Vulnerability Status
PUBLISHED

Published Version
2023-06-24T01:20:25.989Z

Last Modified Date
2023-06-24T01:20:25.989Z

Weakness Enumerations

CWE	URL
CWE-352	http://cwe.mitre.org/data/definitions/352.html

References

Reference URL	Reference Tags
https://fluidattacks.com/advisories/wyckoff/
https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-1722
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1722

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 08:43:44				Added to TrackCVE