CVE-2024-2059: SourceCodester Petrol Pump Management Software service_crud.php unrestricted upload
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/app/servicecrud.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-255374 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2059?
CVE-2024-2059 has been rated as critical due to its potential for unrestricted file uploads.
How does CVE-2024-2059 affect users?
CVE-2024-2059 affects users of SourceCodester Petrol Pump Management Software 1.0 by allowing unauthorized file uploads through a manipulation of the photo argument.
What software is impacted by CVE-2024-2059?
CVE-2024-2059 impacts the SourceCodester Petrol Pump Management Software version 1.0.
How can I mitigate CVE-2024-2059?
To mitigate CVE-2024-2059, users should implement input validation and restrict file uploads to specific file types.
Is CVE-2024-2059 exploitable remotely?
Yes, CVE-2024-2059 can be exploited remotely due to the nature of the unrestricted file upload vulnerability.