Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: ArslanSoft Education Portal v1.1 Clear all filters
TI-2023-05187 CVE-2023-5636 · GHSA-56m8-9r6v-cqp3

Malicious File Upload in ArslanSoft's Education Portal

Priority MEDIUM 45

Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01681 Published 2023-12-01 Fixed in v1.1 CWE-434
TI-2023-05188 CVE-2023-5637 · GHSA-8j4j-rmcw-465w

Plaintext Storage of a Password in ArslanSoft's Education Portal

Priority LOW 34

Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Read Sensitive Strings Within an Executable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00628 Published 2023-12-01 Fixed in v1.1 CWE-434
TI-2023-05186 CVE-2023-5635 · GHSA-rh6q-6cxg-4782

User Enumeration in ArslanSoft's Education Portal

Priority MEDIUM 40

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ArslanSoft Education Portal allows Account Footprinting.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00595 Published 2023-12-01 Fixed in v1.1 CWE-1320
TI-2023-05185 CVE-2023-5634 · GHSA-6m99-jq84-jj9w

SQLi in ArslanSoft's Education Portal

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ArslanSoft Education Portal allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00788 Published 2023-12-01 Fixed in v1.1 CWE-89