https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:44:19.123943+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-6958 CVE-2024-6958 — itsourcecode University Management System Avatar File st_update.php unrestricted upload 2026-10-05T18:44:19.144132+00:00

Affected: itsourcecode University Management System, itsourcecode university_management_system

A vulnerability classified as critical was found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /st_update.php of the component Avatar File Handler. The manipulation of the argument personal_image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272080.