Arbitrary File Upload Vulnerability in Code-projects Shopping Portal
CVE-2024-57668

8.8HIGH

Key Information:

Vendor

Code-projects

Status
Shopping Portal
Vendor
CVE Published:
6 February 2025

What is CVE-2024-57668?

The Code-projects Shopping Portal v1.0 suffers from an arbitrary file upload vulnerability found in the insert-product.php page. This security flaw allows attackers to upload malicious files to the server, potentially leading to unauthorized code execution and further compromise of the web application. To mitigate this risk, it is essential for users to implement proper input validation, restrict file types, and ensure secure file handling practices.

References

https://code-projects.org/shopping-portal-using-php-sourc...
https://github.com/passevery/vul/issues/1

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.