CVE-2024-6115: itsourcecode Simple Online Hotel Reservation System add_room.php unrestricted upload
A vulnerability classified as critical was found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file addroom.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268867.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6115?
CVE-2024-6115 is classified as a critical vulnerability.
How do I fix CVE-2024-6115?
To fix CVE-2024-6115, restrict file upload functionalities and validate file types for uploads in add_room.php.
What is the impact of CVE-2024-6115?
The impact of CVE-2024-6115 allows for unrestricted file uploads, which could lead to remote code execution.
What software is affected by CVE-2024-6115?
CVE-2024-6115 affects Simple Online Hotel Reservation System version 1.0.
How can attackers exploit CVE-2024-6115?
Attackers can exploit CVE-2024-6115 by manipulating the photo argument in add_room.php to upload malicious files.