CVE-2021-37372: Online Student Admission System Project Online Student Admission System

High severity, CVSS 8.8. EPSS: 3.4% chance of exploitation in the next 30 days.

Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can upload malicious PHP files by updating their profile image to gain remote code execution.

Affected products

• Online Student Admission System Project Online Student Admission System: version 1.0 only

Published 2021-10-26. Last modified 2026-06-17.