A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.281961 | Third Party Advisory VDB Entry |
| https://vuldb.com/?ctiid.281961 | Permissions Required VDB Entry |
| https://vuldb.com/?submit.431949 | Third Party Advisory VDB Entry |
| https://github.com/K1nako0/tmp_vuln12/blob/main/README.md | Broken Link |
| https://www.sourcecodester.com/ | Product |
Configurations
History
29 Oct 2024, 00:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/K1nako0/tmp_vuln12/blob/main/README.md - Broken Link | |
| References | () https://vuldb.com/?ctiid.281961 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.281961 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.431949 - Third Party Advisory, VDB Entry | |
| References | () https://www.sourcecodester.com/ - Product | |
| CPE | cpe:2.3:a:nurhodelta17:attendance_and_payroll_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Nurhodelta17
Nurhodelta17 attendance And Payroll System |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
27 Oct 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-27 16:15
Updated : 2024-10-29 00:21
NVD link : CVE-2024-10420
Mitre link : CVE-2024-10420
JSON object : View
Products Affected
nurhodelta17
- attendance_and_payroll_system
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type