CVE-2023-5185

Publication date

2023-09-28 20:52:35

Family

Fluid Attacks

State

PUBLISHED

Description

Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the file parameter of profile/i.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.