online_notice_board_system vulnerabilities

2 known vulnerabilities in online_notice_board_system from Kashipara. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Online Notice Board: Unrestricted Upload of File with Dangerous Type

  CVE-2024-12233Dec 5, 2024code-projects

  A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads t

• 8.8 High severity

  Online Notice Board System: Unrestricted Upload of File with Dangerous Type

  CVE-2023-50760Jan 4, 2024Kashipara GroupEPSS 1.21%

  Online Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of user/update_profile_pic.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.