PT-2023-19522 · Unknown · Judging Management System

Published 2023-02-23 · Updated 2023-03-03 · CVE-2023-24317

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Judging Management System version 1.0

Description The issue is related to an arbitrary file upload vulnerability. This vulnerability is present in the component edit organizer.php.

Recommendations For Judging Management System version 1.0, consider disabling the edit organizer.php component until a patch is available to prevent exploitation of the arbitrary file upload vulnerability.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-24317

Affected Products

Judging Management System

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-24317 · Security Note
• https://osv.dev/vulnerability/CVE-2023-24317 · Vendor Advisory
• https://t.me/cibsecurity/58819 · Telegram Post
• https://packetstormsecurity.com/files/170205/Judging-Management-System-1.0-Shell-Upload.html · Note
• http://judging.com · Note
• http://sourcecodester.com · Note