CVE:CVE-2023-3061
CNNVD:CNNVD-202306-107
Agro-School Management System是农校管理系统。
code-projects Agro-School Management System 1.0版本存在代码问题漏洞，该漏洞源于组件 Attachment Image Handler中的文件 btn_functions.php 存在未知处理，导致不受限制的上传。
solution:Upgrade agro-school_management_system_project agro-school_management_system to a higher version than 1.0,and avoid the version 1.0