CVE-2024-6958 | itsourcecode University Management System 1.0 Avatar File /st_update.php personal_image unrestricted upload

A vulnerability classified as critical was found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /st_update.php of the component Avatar File Handler. The manipulation of the argument personal_image leads to unrestricted upload.

This vulnerability was named CVE-2024-6958. The attack can be initiated remotely. Furthermore, there is an exploit available.