CVE-2024-4966

SourceCodester SchoolWebTech home.php unrestricted upload

CVSS 6.9 MEDIUMEPSS 0.9%CWE-434

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.9EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 may 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A vulnerability was found in SourceCodester SchoolWebTech 1.0. It has been classified as critical. Affected is an unknown function of the file /improve/home.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-264534 is the identifier assigned to this vulnerability.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Productos afectados

SourceCodester · SchoolWebTech

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/CveSecLook/cve/issues/30 https://vuldb.com/?ctiid.264534 https://vuldb.com/?id.264534 https://vuldb.com/?submit.334216