CVEs-PoC/2022/CVE-2022-3436.md

CVE-2022-3436

Description

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210367.

POC

Reference

• http://packetstormsecurity.com/files/176007/Online-Student-Clearance-System-1.0-Shell-Upload.html
• https://vuldb.com/?id.210367

Github

• https://github.com/1337-L3V1ATH0N/Exploit_Development
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Tr0e/CVE_Hunter