School Management System
CVE-2024-9660
HIGH
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (wordfence) · only source for this CVE.
CVSS VectorVendor: wordfence
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mj_smgt_load_documets_new() and mj_smgt_load_documets() functions in all versions up to, and including, 91.5.0. This makes it possible for authenticated attackers, with Student-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
AnalysisAI
The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mj_smgt_load_documets_new() and. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Unrestricted File Upload (CWE-434), which allows attackers to upload malicious files that can be executed on the server. The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mj_smgt_load_documets_new() and mj_smgt_load_documets() functions in all versions up to, and including, 91.5.0. This makes it possible for authenticated attackers, with Student-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Affected products include: Dasinfomedia School Management System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate file types server-side, store uploads outside webroot, use random filenames, scan for malware.
More in School Management System
View allSchool Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport paramet
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password paramete
SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent chang
Mojoomla School Management System for WordPress allows SQL Injection via the id parameter. Rated high severity (CVSS 8.8
Share
External POC / Exploit Code
Leaving vuln.today