What’s Vulnerable › Vulnerabilities

CVE-2023-1722: Yoga Class Registration System 1.0 - ATO

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-06-24 · updated 2026-06-17
• Weakness: CWE-352

Description

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

Affected products

• SourceCodester Yoga Class Registration System: 1.0

References

• https://fluidattacks.com/advisories/wyckoff/
• https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html
• https://fluidattacks.com/advisories/wyckoff/
• https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html

Get alerted when CVE-2023-1722 or the next vulnerability affects your stack