A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.275769 | Permissions Required |
| https://vuldb.com/?ctiid.275769 | Permissions Required |
| https://vuldb.com/?submit.397719 | Third Party Advisory VDB Entry |
| https://github.com/jadu101/CVE/blob/main/SourceCodester_Zipped_Folder_Manager_App_File_Upload.md | Exploit Third Party Advisory |
| https://www.sourcecodester.com/ | Product |
Configurations
History
27 Aug 2024, 16:02
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:rems:zipped_folder_manager_app:1.0:*:*:*:*:*:*:* | |
| First Time |
Rems
Rems zipped Folder Manager App |
|
| References | () https://vuldb.com/?id.275769 - Permissions Required | |
| References | () https://vuldb.com/?ctiid.275769 - Permissions Required | |
| References | () https://github.com/jadu101/CVE/blob/main/SourceCodester_Zipped_Folder_Manager_App_File_Upload.md - Exploit, Third Party Advisory | |
| References | () https://www.sourcecodester.com/ - Product | |
| References | () https://vuldb.com/?submit.397719 - Third Party Advisory, VDB Entry |
26 Aug 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-26 16:15
Updated : 2024-08-27 16:02
NVD link : CVE-2024-8170
Mitre link : CVE-2024-8170
JSON object : View
Products Affected
rems
- zipped_folder_manager_app
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type