CVE-2024-51208: Malicious File Upload
File Upload vulnerability in change-image.php in Anuj Kumar's Boat Booking System version 1.0 allows local attackers to upload a malicious PHP script via the Image Upload Mechanism parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51208?
CVE-2024-51208 is classified as a high-severity vulnerability due to its potential for local file upload exploits.
How do I fix CVE-2024-51208?
To fix CVE-2024-51208, validate and sanitize file uploads and restrict the allowed file types to prevent the upload of malicious PHP scripts.
Who is affected by CVE-2024-51208?
CVE-2024-51208 affects users of Anuj Kumar's Boat Booking System version 1.0 using the vulnerable change-image.php file.
What types of attacks can CVE-2024-51208 enable?
CVE-2024-51208 can enable local attackers to upload malicious PHP scripts that could be executed on the server.
Is there a patch available for CVE-2024-51208?
As of now, there is no official patch available for CVE-2024-51208, so users should implement file upload restrictions immediately.