CVE-2024-0194: CodeAstro Internet Banking System Profile Picture pages_account.php unrestricted upload
A vulnerability, which was classified as critical, has been found in CodeAstro Internet Banking System up to 1.0. This issue affects some unknown processing of the file pagesaccount.php of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249509 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0194?
CVE-2024-0194 has been classified as a critical vulnerability.
How do I fix CVE-2024-0194?
To address CVE-2024-0194, it is recommended to upgrade the CodeAstro Internet Banking System to a version that is not affected.
What component is affected by CVE-2024-0194?
CVE-2024-0194 affects the Profile Picture Handler in the pages_account.php file of the Internet Banking System.
What type of vulnerability is CVE-2024-0194?
CVE-2024-0194 is an unrestricted file upload vulnerability.
Which versions of CodeAstro Internet Banking System are impacted by CVE-2024-0194?
CVE-2024-0194 impacts CodeAstro Internet Banking System version 1.0.