CVE-2024-2849
SourceCodester Simple File Manager unrestricted upload
- State
- Published
- Severity
- 6.3 Medium
- Published
- Mar 23, 2024
- Updated
- Aug 23, 2024
- Reserved
- Mar 22, 2024
Description
A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects unknown code. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257770 is the identifier assigned to this vulnerability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P | VulDB |
Weaknesses
- CWE-434 Unrestricted Upload
Affected Products
| Product | Versions |
|---|---|
Simple File ManagerSourceCodester |
|
References
- VDB-257770 | SourceCodester Simple File Manager unrestricted uploadvdb-entrytechnical-description
- VDB-257770 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #303123 | Sourcecodester Simple File Manager Web App using PHP and MySQL Database Free Source Code v1.0 unrestricted uploadsthird-party-advisory
- https://github.com/CveSecLook/cve/issues/1exploitissue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.