CVE-2022-42198 The User List function suffers from insecure file upload in Simple Exam Reviewer Management System v1.0.
Therefore, it is recommended to use the HTTPS protocol to protect sensitive data and avoid any file transfer through unsecured protocols like FTP.
In order to improve the User List form in the future, we recommend the following:
Add an input field for the email address and a check box for each user.
Optimize the layout of the form to avoid ambiguous fields and fields with long names.
Add a description for each field.
Add a separate form for the User File upload.
Use secure file transfer protocols like HTTPS.
Enable two-factor authentication for the system administrator account.
In order to improve the User File upload form in the future, we recommend the following:
Add an input field for the email address and a check box for each user.
Optimize the layout of the form to avoid ambiguous fields and fields with long names.
Add a description for each field.
Add a separate form for the User File upload.
Use secure file transfer protocols like HTTPS.
Enable two-factor authentication for the system administrator account.
In order to improve the User List form in the future, we recommend the following:
Add an input field for the email address and a check box for each user.
Optimize the layout of the form to avoid ambiguous fields and fields with long names.
Add a description for each field.
Add a separate form for
FAQ
Q: What is User File uploading?
A: User File uploading allows you to upload files that are associated with your account. You can upload your own personal files or other users' files.
Timeline
Published on: 10/20/2022 13:15:00 UTC
Last modified on: 10/21/2022 18:35:00 UTC