CVE-2023-1734: SourceCodester Young Entrepreneur E-Negosyo System unrestricted upload

Published Mar 30, 2023

Updated

A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected is an unknown function of the file admin/products/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. VDB-224622 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Young Entrepreneur E-negosyo System Project Young Entrepreneur E-negosyo System=1.0

Event History

Mar 30, 2023

CVE Published

07:00 PM

Data Sourced

07:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-1734?

CVE-2023-1734 is classified as a critical vulnerability.

How does CVE-2023-1734 affect the Young Entrepreneur E-Negosyo System?

CVE-2023-1734 allows for unrestricted file upload due to improper handling of image arguments in the admin functionality.

How do I fix CVE-2023-1734?

To fix CVE-2023-1734, ensure to implement strict validation and sanitization of uploaded files for the affected system.

What versions of the Young Entrepreneur E-Negosyo System are affected by CVE-2023-1734?

CVE-2023-1734 affects version 1.0 of the Young Entrepreneur E-Negosyo System.

What is the potential impact of exploiting CVE-2023-1734?

Exploitation of CVE-2023-1734 could lead to unauthorized access to the system and exposure to malware or other security threats.