CVE-2023-1728 — Unrestricted Upload of File with Dangerous Type in Fernus LMS

CVE-2023-1728

Unrestricted Upload of File with Dangerous Type in Fernus LMS PUBLISHED

Description (CNA)

Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection. This issue affects LMS: before 23.04.03.

Affected (CNA)

Vendor / product	Versions
Fernus Informatics / LMS	affected 0 before 23.04.03

CWE

CWE-434

References

https://www.usom.gov.tr/bildirim/tr-23-0194
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0194

ADP enrichment

CVE

No English description supplied.

https://www.usom.gov.tr/bildirim/tr-23-0194

CISA-ADP

No English description supplied.

No references supplied.