PT-2023-25433 · Unknown · Phpgurukul Online Security Guards Hiring System

Published 2023-07-14 · Updated 2023-08-31 · CVE-2023-36119

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Security Guards Hiring System version 1.0

Description The issue allows a remote attacker to execute arbitrary code via a crafted php file to the osghsadminimages file. This is a result of a file upload vulnerability.

Recommendations For PHPGurukul Online Security Guards Hiring System version 1.0, consider restricting access to the osghsadminimages directory to prevent arbitrary code execution until a patch is available. As a temporary workaround, disabling the file upload feature can help minimize the risk of exploitation.

Related Identifiers

CVE-2023-36119

Affected Products

Phpgurukul Online Security Guards Hiring System

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-36119 · Security Note
• https://t.me/cvenotify/54387 · Telegram Post
• https://t.me/cvenotify/55200 · Telegram Post
• https://t.me/cibsecurity/66731 · Telegram Post