Simple College Website vulnerabilities

2 known vulnerabilities in Simple College Website from Simple College Website Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Simple College Website: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2022-40089Sep 22, 2022Simple College Website ProjectEPSS 2.72%

  A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allow_url_include is set to On.

• 9.8 Critical severity

  Simple College Website: Unrestricted Upload of File with Dangerous Type

  CVE-2022-40087Sep 22, 2022Simple College Website ProjectEPSS 1.89%

  Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function file_put_contents(). This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.