ProjectWorlds Online Time Table Generator Unrestricted File Upload RCE

Critical Vulnerability Information Affected Product Project Name: projectworlds Online Time Table Generator Portal - Source code Version: Current release (as of 2023-03-14) Link: https://projectworlds.in/online-time-table-generator-php-mysql/ Vulnerable File File Path: /student/updateprofile.php Vulnerability Type CVE ID: CVE-434: Unrestricted Upload of File with Dangerous Type Description: Remote Code Execution via Unrestricted File Upload Root Cause Issue: The file upload functionality in lacks proper validation of user-uploaded files. Attackers can upload malicious scripts (e.g., files), which the server executes, leading to full system compromise. Impact Risks: - Malware Distribution - Remote Code Execution (RCE) - Data Breach - Denial of Service (DoS) - Web Shell Installation 表 - Bypassing Security Controls - Reputation Damage Description Detailed Issue: The portal’s file upload module fails to validate file types and extensions. By creating a malicious file (e.g., ) and submitting it via the upload form, attackers can bypass security controls. Code Example: Vulnerability Details and POC Vulnerable Parameter: File upload field: (POST request) Steps to Reproduce: 1. Upload any file (e.g., ) 2. Access the uploaded file path and successfully execute function Recommended Fixes Input Validation & Filtering: Ensure parameters only allow expected characters to prevent path traversal attacks. Filename Sanitization: Strictly validate uploaded filenames; avoid using user-provided original names. Random Filename Generation: Generate random filenames to prevent direct access to malicious files. File Type Validation: Validate file extensions and MIME types to detect spoofed formats. Storage Directory Permissions: Store uploaded files in non-web-accessible directories or configure the server to disable script execution. Server Configuration: For Apache/Nginx, restrict execution permissions in upload directories. Error Handling: Avoid exposing internal path details; use custom error pages.

Goal Reached Thanks to every supporter — we hit 100%!

ProjectWorlds Online Time Table Generator Unrestricted File Upload RCE

More from this source