CVE-2024-8341

Published: Aug 30, 2024Modified: Sep 4, 2024

5.3

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: CNA (Secondary)

Description

A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0. This vulnerability affects unknown code of the file /controllers/add_user.php. The manipulation of the argument avatar leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected (1)

Products: Nelzkie15: Pet Shop Management System

1 product

Pet Shop Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nelzkie15 Pet Shop Management System	Version 1.0

Related CWEs

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (5)

https://github.com/enjoyworld/webray.com.cn/blob/main/cves/Petshop_Management_System/Petshop_Management_System%20add_user.php%20any%20file%20upload.md

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?ctiid.276220

Source: cna@vuldb.com

Permissions Required

https://vuldb.com/?id.276220

Source: cna@vuldb.com

Permissions RequiredThird Party Advisory

https://vuldb.com/?submit.399661

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://www.sourcecodester.com/

Source: cna@vuldb.com

Product

Timeline

No history available yet.