yunaranyancat/poc-dump

Releases0

Stars1

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-28173 ↗	Mar 31, 2021Wednesday, 31 March 2021, 13:15	7.2 HIGH	6.5 MEDIUM
Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using the image upload functionality, which is stored in /alumni/admin/assets/uploads/.
CVE-2020-28172 ↗	Mar 31, 2021Wednesday, 31 March 2021, 13:15	9.8 CRITICAL	7.5 HIGH
A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated attackers to bypass the admin authentication mechanism in college_website/admin/ajax.php?action=login, thus gaining access to the website administrative panel.