CVE-2024-32254: Malicious File Upload
Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. When creating a new package, there is no checks for what types of files are uploaded from the image.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32254?
CVE-2024-32254 is considered a high-severity vulnerability due to its potential for unrestricted file uploads.
How do I fix CVE-2024-32254?
To fix CVE-2024-32254, implement strict validation checks for uploaded files to ensure only safe file types are allowed.
What types of file uploads are affected by CVE-2024-32254?
CVE-2024-32254 is vulnerable to unrestricted uploads of files with dangerous types, including executable scripts and malicious files.
Is CVE-2024-32254 present in earlier versions of Phpgurukul Tourism Management System?
CVE-2024-32254 is specifically identified in version 2.0 of Phpgurukul Tourism Management System, and earlier versions may not be affected.
What could an attacker achieve through CVE-2024-32254?
An attacker exploiting CVE-2024-32254 could upload malicious files that may lead to a range of exploits, including remote code execution.