CVE-2024-4927: SourceCodester Simple Online Bidding System unrestricted upload
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /simple-online-bidding-system/admin/ajax.php?action=saveproduct. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-264463.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4927?
CVE-2024-4927 has been declared as critical due to its impact on the SourceCodester Simple Online Bidding System.
How do I fix CVE-2024-4927?
To fix CVE-2024-4927, it is recommended to apply any available patches for SourceCodester Simple Online Bidding System version 1.0 or mitigate the vulnerability by restricting access to the affected functionality.
What is the impact of CVE-2024-4927?
The impact of CVE-2024-4927 involves potential unauthorized manipulation through the file /simple-online-bidding-system/admin/ajax.php?action=save_product.
Which version of SourceCodester Simple Online Bidding System is affected by CVE-2024-4927?
CVE-2024-4927 affects version 1.0 of the SourceCodester Simple Online Bidding System.
Is there a workaround for CVE-2024-4927 until a fix is available?
Yes, a possible workaround for CVE-2024-4927 includes implementing strict access controls to the affected file.