Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Jadore147258369

#26738de 56,330
9.8CVSS total
Vulnerabilidades · 1
PT-2023-23492
9.8
2023-05-16
Unknown · Sourcecodester Online Computer/Laptop Store · CVE-2023-31857
**Name of the Vulnerable Software and Affected Versions** Sourcecodester Online Computer and Laptop Store version 1.0 **Description** The issue allows unrestricted file upload, which can lead to remote code execution. The vulnerability path is "/classes/Users.php?f=save". **Recommendations** For version 1.0, restrict access to the "/classes/Users.php?f=save" endpoint to minimize the risk of exploitation. Consider implementing proper file upload validation and sanitization to prevent malicious file uploads. As a temporary workaround, consider disabling the file upload functionality in the Users.php file until a patch is available.