A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255373 was assigned to this vulnerability.
References
Configurations
History
10 Dec 2024, 23:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:mayurik:petrol_pump_management:1.0:*:*:*:*:*:*:* | |
| CWE | ||
| References | () https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/Surya2Developer%20Online_shopping_-system/SOURCECODESTER%20Petrol%20pump%20management%20software/Unauthenticated%20Arbitrary%20File%20Upload.md - Broken Link | |
| References | () https://vuldb.com/?ctiid.255373 - Permissions Required, VDB Entry | |
| References | () https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Petrol%20pump%20management%20software/Unauthenticated%20Arbitrary%20File%20Upload.md - Broken Link | |
| References | () https://vuldb.com/?id.255373 - Third Party Advisory, VDB Entry | |
| First Time |
Mayurik petrol Pump Management
Mayurik |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
01 Mar 2024, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-01 11:15
Updated : 2024-12-10 23:23
NVD link : CVE-2024-2058
Mitre link : CVE-2024-2058
JSON object : View
Products Affected
mayurik
- petrol_pump_management
CWE
No CWE.