Unrestricted File Upload Vulnerability in SourceCodester Petshop Management System
CVE-2024-8341

9.8CRITICAL

Key Information:

Vendor

SourceCodester
Status
Pet Shop Management System
Vendor
CVE Published:
30 August 2024

What is CVE-2024-8341?

A critical vulnerability has been identified in the SourceCodester Petshop Management System version 1.0, specifically affecting the '/controllers/add_user.php' file. This vulnerability permits unauthorized users to upload arbitrary files through a manipulated 'avatar' parameter. The nature of this flaw presents a significant threat, as it allows for remote exploitation, potentially compromising the integrity and security of the web application. The exploit has been publicly disclosed, making it imperative for users of this software to apply necessary security measures and patches to mitigate any associated risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://vuldb.com/?id.276220
https://vuldb.com/?ctiid.276220
https://vuldb.com/?submit.399661

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.