Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01369·Published 2023-04-04·Fixed in 23.04.03CWE-434