Critical severity9.8NVD Advisory· Published Jul 30, 2021· Updated Jun 17, 2026
CVE-2021-25200
CVE-2021-25200
Description
Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\student_avatar.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:learning_management_system_project:learning_management_system:1.0:*:*:*:*:*:*:*
- SourceCodester/Learning Management Systemdescription
- Range: 1.0
Patches
Vulnerability mechanics
References
1- github.com/TCSWT/Learning-Management-System/blob/main/README.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.