Bypassing File Upload Restrictions via Webshell: A Security Threat
CVE-2024-8463
8.8HIGH
Summary
The vulnerability in PHPGurukul's Job Portal version 1.0 allows an authenticated user to bypass file upload restrictions. This flaw enables the user to upload unauthorized files which can lead to the execution of remote code through a webshell. Such an attack could compromise the server, exposing sensitive data and potentially leading to unauthorized control over the affected system. Organizations using this version of the Job Portal should take immediate action to mitigate this risk.
Affected Version(s)
Job Portal 1.0
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database
Credit
Rafael Pedrero