Unrestricted File Upload Vulnerability in Photo Handler Component

CVE-2024-3948

What is CVE-2024-3948?

A vulnerability exists in the SourceCodester Home Clean Service System 1.0, specifically within the Photo Handler component located at the file path \admin\student.add.php. This flaw allows an attacker to perform unrestricted uploads of files which may lead to severe security compromises. The issue poses a risk of remote exploitation, allowing malicious actors to upload arbitrary files to the server. Given the public disclosure of the exploit, it is critical for users of this system to take immediate action to mitigate the risks associated with this vulnerability.

References