Unrestricted File Upload Vulnerability in SourceCodester’s Drag and Drop Image Upload

CVE-2024-9975

Summary

A critical vulnerability has been identified in the SourceCodester Drag and Drop Image Upload version 1.0, which allows attackers to execute unrestricted file uploads via a compromised upload.php file. This flaw can be exploited remotely, enabling adversaries to bypass security measures and potentially gain control over the affected system. The public disclosure of this vulnerability highlights the urgent need for users and administrators to update their software and employ appropriate security patches to mitigate the risk associated with this exploit.

References