Bypassing File Upload Restrictions via Webshell: A Security Threat
CVE-2024-8463

8.8HIGH

Key Information:

Vendor
PHPgurukul
Vendor
CVE Published:
5 September 2024

Summary

The vulnerability in PHPGurukul's Job Portal version 1.0 allows an authenticated user to bypass file upload restrictions. This flaw enables the user to upload unauthorized files which can lead to the execution of remote code through a webshell. Such an attack could compromise the server, exposing sensitive data and potentially leading to unauthorized control over the affected system. Organizations using this version of the Job Portal should take immediate action to mitigate this risk.

Affected Version(s)

Job Portal 1.0

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database

Credit

Rafael Pedrero
.