CVE-2024-3948: SourceCodester Home Clean Service System Photo student.add.php unrestricted upload
A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261440.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3948?
CVE-2024-3948 is rated as critical due to its potential for unrestricted file upload leading to severe security implications.
How do I fix CVE-2024-3948?
To fix CVE-2024-3948, ensure strict validation and restrictions on the file upload functionality in the affected component.
Which software is affected by CVE-2024-3948?
CVE-2024-3948 affects SourceCodester Home Clean Service System version 1.0 and Library System Project Library System version 1.0.
What type of vulnerability is CVE-2024-3948?
CVE-2024-3948 is an unrestricted file upload vulnerability that can be exploited by attackers.
Can CVE-2024-3948 be exploited remotely?
Yes, CVE-2024-3948 can potentially be exploited remotely if the file upload feature is accessible over the network.