Unrestricted File Upload Vulnerability in SourceCodester Vehicle Management System
CVE-2024-5145

8.8HIGH

Key Information:

Vendor

SourceCodester
Status
Vehicle Management System
Vendor
CVE Published:
20 May 2024

What is CVE-2024-5145?

The SourceCodester Vehicle Management System versions up to 1.0 are susceptible to an unrestricted file upload vulnerability due to improper handling of the HTTP POST request in the /newdriver.php file. This flaw allows attackers to upload arbitrary files, potentially leading to malicious code execution on the server. The vulnerability can be exploited remotely, giving unauthorized users an opportunity to compromise the system without physical access. Organizations using this vehicle management solution should immediately implement security measures to patch this vulnerability and prevent exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://vuldb.com/?id.265289
https://vuldb.com/?ctiid.265289
https://vuldb.com/?submit.339721

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.