CVE-2024-3948: SourceCodester Home Clean Service System Photo student.add.php unrestricted upload
First published: Thu Apr 18 2024(Updated: )
A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261440.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Home Clean Services Management System | ||
| code-projects Library System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-3948?
CVE-2024-3948 is rated as critical due to its potential for unrestricted file upload leading to severe security implications.
How do I fix CVE-2024-3948?
To fix CVE-2024-3948, ensure strict validation and restrictions on the file upload functionality in the affected component.
Which software is affected by CVE-2024-3948?
CVE-2024-3948 affects SourceCodester Home Clean Service System version 1.0 and Library System Project Library System version 1.0.
What type of vulnerability is CVE-2024-3948?
CVE-2024-3948 is an unrestricted file upload vulnerability that can be exploited by attackers.
Can CVE-2024-3948 be exploited remotely?
Yes, CVE-2024-3948 can potentially be exploited remotely if the file upload feature is accessible over the network.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/severity
- agent/last-modified-date
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/softwarecombine
- agent/tags
- vendor/sourcecodester
- canonical/sourcecodester home clean services management system
- vendor/library system project
- canonical/code-projects library system
- version/code-projects library system/1.0