CVE-2024-2604

Published: Mar 18, 2024Modified: Mar 6, 2025

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A vulnerability was found in SourceCodester File Manager App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update-file.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257182 is the identifier assigned to this vulnerability.

Affected (1)

Products: Remyandrade: File Manager App

1 product

File Manager App

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Remyandrade File Manager App	Version 1.0

Related CWEs

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (6)

https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20File%20Manager%20App/Arbitrary%20File%20Upload%20-%20update-file.php.md

Source: cna@vuldb.com

Broken Link

https://vuldb.com/?ctiid.257182

Source: cna@vuldb.com

Permissions RequiredVDB Entry

https://vuldb.com/?id.257182

Source: cna@vuldb.com

Permissions RequiredVDB Entry

https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20File%20Manager%20App/Arbitrary%20File%20Upload%20-%20update-file.php.md

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://vuldb.com/?ctiid.257182

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredVDB Entry

https://vuldb.com/?id.257182

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredVDB Entry

Timeline

No history available yet.