CVE-2023-5829

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in code-projects Admission Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file student_avatar.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-243728.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Oct 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-58309.8A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authen CVE-2023-58315.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before CVE-2023-58329.1Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.CVE-2023-58338.8Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.CVE-2023-58347.8HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential f CVE-2023-58356.1A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function markdown of the file s CVE-2023-58369.8A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this issue is some unknown CVE-2023-58376.1A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of th CVE-2023-58389.8Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9.CVE-2023-58397.8Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9.CVE-2023-58408.8Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9.CVE-2023-58419.1Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation O