Code-Projects Computer Laboratory System File Upload Vulnerability Allowing PHP Backdoor Execution

A file upload vulnerability has been identified in Code-Projects Computer Laboratory System version 1.0. This issue allows staff to upload malicious PHP files disguised as image uploads when changing avatar information. Once uploaded, these files can be executed as web shells to gain unauthorized access to server permissions.

Impact

Exploitation of this vulnerability allows for remote code execution on the server, with the uploaded PHP backdoor being executed as a web shell.

Reproduction

To reproduce this vulnerability, log into the system and navigate to the avatar change feature. Upload a malicious file named 'cmd.php' as an avatar. After the file is uploaded, use a web shell connection tool, such as AntSword, to connect to the server. Once connected, the server can be controlled remotely.