Mawenjie

**Name of the Vulnerable Software and Affected Versions** code-projects Document Management System version 1.0 **Description** A critical issue has been found in code-projects Document Management System that allows for unrestricted file upload through manipulation of the `uploaded file` argument in the `/insert.php` endpoint. The attack can be initiated remotely. The exploit has been publicly disclosed. **Recommendations** Address the unrestricted upload issue in the processing of the `/insert.php` file. Sanitize or validate the `uploaded file` argument to prevent malicious file uploads.