Description (CNA)
A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.master.php of the component Instant Exam Creation Handler. The manipulation of the argument uploadfile results in server-side request forgery. The attack can be executed remotely. The exploit is now public and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / PHPEMS | affected 11.0 |
CWE
CWE-918
References
- https://vuldb.com/vuln/358207
- https://vuldb.com/vuln/358207/cti
- https://vuldb.com/submit/789990
- https://vulnplus-note.wetolink.com/share/1QZ4NE0oTRIc
ADP enrichment
No English description supplied.
No references supplied.