CVE-2024-10410: SourceCodester Online Hotel Reservation System controller.php upload unrestricted upload
A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. Affected by this vulnerability is the function upload of the file /admin/modroom/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10410?
CVE-2024-10410 is classified as a critical vulnerability.
How can I fix CVE-2024-10410?
To fix CVE-2024-10410, ensure that proper file upload validation and restrictions are implemented in the affected function.
Which software versions are affected by CVE-2024-10410?
CVE-2024-10410 affects version 1.0 of the SourceCodester Online Hotel Reservation System.
What type of vulnerability is CVE-2024-10410?
CVE-2024-10410 is an unrestricted file upload vulnerability.
Where in the SourceCodester Online Hotel Reservation System can CVE-2024-10410 be exploited?
CVE-2024-10410 can be exploited in the upload function of /admin/mod_room/controller.php?action=add.