PT-2021-11455 · Unknown · Simple College Website

Published 2021-03-31 · Updated 2021-04-02 · CVE-2020-28173

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Simple College Website version 1.0

Description: The issue allows a user to conduct remote code execution via the "/alumni/admin/ajax.php?action=save settings" API endpoint when uploading a malicious file using the image upload functionality. The uploaded files are stored in the "/alumni/admin/assets/uploads/" directory.

Recommendations: For Simple College Website version 1.0, as a temporary workaround, consider disabling the image upload functionality until a patch is available. Restrict access to the "/alumni/admin/ajax.php?action=save settings" API endpoint to minimize the risk of exploitation. Avoid using the image upload feature in the affected API endpoint until the issue is resolved.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-28173

Affected Products

Simple College Website

References · 6

• 🔥 https://github.com/yunaranyancat/poc-dump/blob/main/simplecollegewebsite/sqli_rce.py · Exploit
• 🔥 https://dl.packetstormsecurity.net/2010-exploits/simplecollegewebsite10-sqlexec.txt · Exploit
• https://osv.dev/vulnerability/CVE-2020-28173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28173 · Security Note
• https://sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html · Note
• https://sourcecodester.com/sites/default/files/download/oretnom23/simple-college-website.zip · Note