PT-2024-22448 · Sourcecodester · Sourcecodester Simple File Manager
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SourceCodester Simple File Manager version 1.0
Description
A critical vulnerability was found in the software, affecting unknown code. The manipulation of the
photo argument leads to unrestricted upload. The attack can be initiated remotely.Recommendations
For version 1.0, consider disabling the file upload feature until a patch is available to prevent unrestricted upload. Restrict access to the
photo argument to minimize the risk of exploitation.Exploit
Fix
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sourcecodester Simple File Manager