CVE-2024-0185: RRJ Nueva Ecija Engineer Online Portal Avatar dasboard_teacher.php unrestricted upload
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file dasboardteacher.php of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249443.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0185?
CVE-2024-0185 has been rated as critical.
How do I fix CVE-2024-0185?
To fix CVE-2024-0185, ensure that the file upload functionality of dasboard_teacher.php is properly secured to prevent unrestricted file uploads.
What affects CVE-2024-0185?
CVE-2024-0185 affects the RRJ Nueva Ecija Engineer Online Portal version 1.0.
What component is involved in CVE-2024-0185?
The component involved in CVE-2024-0185 is the Avatar Handler of the file dasboard_teacher.php.
What kind of attack can CVE-2024-0185 lead to?
CVE-2024-0185 can lead to unrestricted file uploads, allowing attackers to exploit the vulnerability.