Unrestricted File Upload Vulnerability in SourceCodester Home Owners Collection Management System
CVE-2024-6439

9.8CRITICAL

Key Information:

Vendor

SourceCodester
Status
Home Owners Collection Management System
Vendor
CVE Published:
2 July 2024

What is CVE-2024-6439?

A significant vulnerability has been discovered in the SourceCodester Home Owners Collection Management System version 1.0, categorized as an unrestricted file upload flaw. This vulnerability arises from improper handling of file uploads in the '/classes/Users.php?f=save' endpoint, where an attacker can manipulate the 'img' parameter to upload arbitrary files. This security loophole allows unauthorized individuals to execute remote code, leading to serious threats like server compromise and data breaches. The details of this exploit have been publicly disclosed, heightening the urgency for users to implement necessary security measures and updates. It is crucial for organizations using this system to address this vulnerability immediately to safeguard their data and infrastructure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://vuldb.com/?id.270167
https://vuldb.com/?ctiid.270167
https://vuldb.com/?submit.366753

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.