A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file users/register-complaint.php of the component Lodge Complaint Section. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254723.
References
| Link | Resource |
|---|---|
| https://toradah.notion.site/Remote-Code-Execution-RCE-via-Unrestricted-File-Upload-6ed7ae9c833c4d8baaae7d64ae0c4a47?pvs=4 | Exploit Third Party Advisory |
| https://toradah.notion.site/Remote-Code-Execution-RCE-via-Unrestricted-File-Upload-6ed7ae9c833c4d8baaae7d64ae0c4a47?pvs=4 | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.254723 | Permissions Required |
| https://vuldb.com/?ctiid.254723 | Permissions Required |
| https://vuldb.com/?id.254723 | Permissions Required |
| https://vuldb.com/?id.254723 | Permissions Required |
Configurations
History
10 Dec 2024, 19:56
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CPE | cpe:2.3:a:razormist:complaint_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Razormist complaint Management System
Razormist |
|
| References | () https://vuldb.com/?id.254723 - Permissions Required | |
| References | () https://toradah.notion.site/Remote-Code-Execution-RCE-via-Unrestricted-File-Upload-6ed7ae9c833c4d8baaae7d64ae0c4a47?pvs=4 - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.254723 - Permissions Required |
26 Feb 2024, 16:32
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-26 16:27
Updated : 2024-12-10 19:56
NVD link : CVE-2024-1875
Mitre link : CVE-2024-1875
JSON object : View
Products Affected
razormist
- complaint_management_system
CWE
No CWE.