CVE-2024-30849

Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via filename parameter in admin/products_photo.php.
CVSS

No CVSS.

References
Link Resource
https://github.com/wkeyi0x1/vul-report/issues/3 Exploit Third Party Advisory Issue Tracking
https://github.com/wkeyi0x1/vul-report/issues/3 Exploit Third Party Advisory Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:donbermoy:complete_e-commerce_site:1.0:*:*:*:*:*:*:*

History

05 May 2025, 17:47

Type Values Removed Values Added
CPE cpe:2.3:a:donbermoy:complete_e-commerce_site:1.0:*:*:*:*:*:*:*
First Time Donbermoy complete E-commerce Site
Donbermoy
References () https://github.com/wkeyi0x1/vul-report/issues/3 - () https://github.com/wkeyi0x1/vul-report/issues/3 - Exploit, Third Party Advisory, Issue Tracking

05 Apr 2024, 08:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-05 08:15

Updated : 2025-05-05 17:47


NVD link : CVE-2024-30849

Mitre link : CVE-2024-30849


JSON object : View

Products Affected

donbermoy

  • complete_e-commerce_site
CWE

No CWE.