Unrestricted File Upload Vulnerability in SourceCodester Vehicle Management System

CVE-2024-5145

Summary

The SourceCodester Vehicle Management System versions up to 1.0 are susceptible to an unrestricted file upload vulnerability due to improper handling of the HTTP POST request in the /newdriver.php file. This flaw allows attackers to upload arbitrary files, potentially leading to malicious code execution on the server. The vulnerability can be exploited remotely, giving unauthorized users an opportunity to compromise the system without physical access. Organizations using this vehicle management solution should immediately implement security measures to patch this vulnerability and prevent exploitation.

References