Arbitrary File Upload Vulnerability in Code-projects Shopping Portal
CVE-2024-57668
8.8HIGH
Summary
The Code-projects Shopping Portal v1.0 suffers from an arbitrary file upload vulnerability found in the insert-product.php page. This security flaw allows attackers to upload malicious files to the server, potentially leading to unauthorized code execution and further compromise of the web application. To mitigate this risk, it is essential for users to implement proper input validation, restrict file types, and ensure secure file handling practices.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved