CVE-2024-25869: Malicious File Upload
An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via upload of a crafted php file in the settings.php component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25869?
CVE-2024-25869 is classified as a critical severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-25869?
To fix CVE-2024-25869, ensure that file uploads are restricted to only allowed file types and implement proper validation of uploaded files.
Which versions of the CodeAstro Membership Management System are affected by CVE-2024-25869?
CVE-2024-25869 affects the CodeAstro Membership Management System version 1.0.
Can CVE-2024-25869 be exploited remotely?
Yes, CVE-2024-25869 can be exploited remotely, allowing an attacker to execute arbitrary code through a crafted file upload.
What component of the CodeAstro Membership Management System is vulnerable in CVE-2024-25869?
The vulnerable component in CVE-2024-25869 is the settings.php file, which does not properly handle file uploads.