Vulnerabilities > Simple College Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-03-31 | CVE-2020-28173 | Unrestricted Upload of File with Dangerous Type vulnerability in Simple College Project Simple College 1.0 Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using the image upload functionality, which is stored in /alumni/admin/assets/uploads/. | 7.2 |
| 2021-03-31 | CVE-2020-28172 | SQL Injection vulnerability in Simple College Project Simple College 1.0 A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated attackers to bypass the admin authentication mechanism in college_website/admin/ajax.php?action=login, thus gaining access to the website administrative panel. | 9.8 |