Code Projects · Agro-School Management System · CVE-2023-3061
**Name of the Vulnerable Software and Affected Versions**
code-projects Agro-School Management System version 1.0
**Description**
A critical issue affects the Attachment Image Handler component, specifically the file btn functions.php, leading to unrestricted upload. The attack can be initiated remotely.
**Recommendations**
For code-projects Agro-School Management System version 1.0, consider disabling the Attachment Image Handler component until a patch is available. Restrict access to the btn functions.php file to minimize the risk of exploitation. Avoid using the Attachment Image Handler feature until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.