CVE-2024-2690: SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload
A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been classified as critical. Affected is an unknown function of the file /uupdate.php. The manipulation of the argument ima leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257388.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2690?
CVE-2024-2690 has been classified as critical due to its potential for unrestricted file uploads.
How do I fix CVE-2024-2690?
To fix CVE-2024-2690, validate and sanitize the input for the argument 'ima' in the /uupdate.php file.
What systems are affected by CVE-2024-2690?
CVE-2024-2690 affects SourceCodester Online Discussion Forum Site version 1.0.
Can CVE-2024-2690 be exploited remotely?
Yes, CVE-2024-2690 can be exploited remotely, allowing attackers to execute unauthorized file uploads.
What is the impact of CVE-2024-2690 on affected systems?
The impact of CVE-2024-2690 is that it allows attackers to upload malicious files, potentially leading to a full system compromise.