Unrestricted File Upload Vulnerability in SourceCodester Home Owners Collection Management System

Summary

A significant vulnerability has been discovered in the SourceCodester Home Owners Collection Management System version 1.0, categorized as an unrestricted file upload flaw. This vulnerability arises from improper handling of file uploads in the '/classes/Users.php?f=save' endpoint, where an attacker can manipulate the 'img' parameter to upload arbitrary files. This security loophole allows unauthorized individuals to execute remote code, leading to serious threats like server compromise and data breaches. The details of this exploit have been publicly disclosed, heightening the urgency for users to implement necessary security measures and updates. It is crucial for organizations using this system to address this vulnerability immediately to safeguard their data and infrastructure.

References