A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resume_upload.php of the component Image Handler. The manipulation of the argument fileToUpload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273541 was assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.273541 | Third Party Advisory |
| https://vuldb.com/?ctiid.273541 | Permissions Required Third Party Advisory |
| https://vuldb.com/?submit.383860 | Third Party Advisory |
| https://github.com/DeepMountains/Mirage/blob/main/CVE11-2.md | Exploit |
Configurations
History
09 Aug 2024, 15:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/DeepMountains/Mirage/blob/main/CVE11-2.md - Exploit | |
| References | () https://vuldb.com/?ctiid.273541 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?id.273541 - Third Party Advisory | |
| References | () https://vuldb.com/?submit.383860 - Third Party Advisory | |
| First Time |
Angeljudesuarez placement Management System
Angeljudesuarez |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CPE | cpe:2.3:a:angeljudesuarez:placement_management_system:1.0:*:*:*:*:*:*:* |
04 Aug 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-04 03:15
Updated : 2024-08-09 15:33
NVD link : CVE-2024-7450
Mitre link : CVE-2024-7450
JSON object : View
Products Affected
angeljudesuarez
- placement_management_system
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type