CVE-2024-57487: Code Injection
In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57487?
CVE-2024-57487 is classified as a critical vulnerability due to its potential to allow remote code execution on the server.
How do I fix CVE-2024-57487?
To fix CVE-2024-57487, implement proper file validation to ensure only allowed file types and extensions can be uploaded.
What affects CVE-2024-57487?
CVE-2024-57487 affects version 1.0 of the Code-Projects Online Car Rental System, specifically its file upload feature.
Can CVE-2024-57487 be exploited remotely?
Yes, CVE-2024-57487 can be exploited remotely, enabling attackers to upload malicious files and execute commands on the server.
What type of attacks can CVE-2024-57487 facilitate?
CVE-2024-57487 can facilitate remote code execution attacks by allowing the upload of PHP shells.