CVE-2024-6801
SourceCodester Online Student Management System add-students.php unrestricted upload
- State
- Published
- Severity
- 5.3 Medium
- Published
- Jul 17, 2024
- Updated
- Aug 1, 2024
- Reserved
- Jul 16, 2024
Description
A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects some unknown processing of the file /add-students.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271703.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P | VulDB |
Weaknesses
- CWE-434 Unrestricted Upload
Affected Products
| Product | Versions |
|---|---|
Online Student Management SystemSourceCodester |
|
References
- VDB-271703 | SourceCodester Online Student Management System add-students.php unrestricted uploadvdb-entrytechnical-description
- VDB-271703 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #374774 | SourceCodester Online student management system in php free download v1.0 Unrestricted Uploadthird-party-advisory
- https://github.com/aaajuna/demo/issues/1exploitissue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.