Unrestricted File Upload Vulnerability in SourceCodester Petshop Management System

CVE-2024-8341

What is CVE-2024-8341?

A critical vulnerability has been identified in the SourceCodester Petshop Management System version 1.0, specifically affecting the '/controllers/add_user.php' file. This vulnerability permits unauthorized users to upload arbitrary files through a manipulated 'avatar' parameter. The nature of this flaw presents a significant threat, as it allows for remote exploitation, potentially compromising the integrity and security of the web application. The exploit has been publicly disclosed, making it imperative for users of this software to apply necessary security measures and patches to mitigate any associated risks.

References