CVE-2024-2690: SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload
First published: Wed Mar 20 2024(Updated: )
A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been classified as critical. Affected is an unknown function of the file /uupdate.php. The manipulation of the argument ima leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257388.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Online Discussion Forum Site | ||
| Razormist Online Discussion Forum Site | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-2690?
CVE-2024-2690 has been classified as critical due to its potential for unrestricted file uploads.
How do I fix CVE-2024-2690?
To fix CVE-2024-2690, validate and sanitize the input for the argument 'ima' in the /uupdate.php file.
What systems are affected by CVE-2024-2690?
CVE-2024-2690 affects SourceCodester Online Discussion Forum Site version 1.0.
Can CVE-2024-2690 be exploited remotely?
Yes, CVE-2024-2690 can be exploited remotely, allowing attackers to execute unauthorized file uploads.
What is the impact of CVE-2024-2690 on affected systems?
The impact of CVE-2024-2690 is that it allows attackers to upload malicious files, potentially leading to a full system compromise.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/sourcecodester
- canonical/sourcecodester online discussion forum site
- vendor/razormist
- canonical/razormist online discussion forum site
- version/razormist online discussion forum site/1.0