CVE-2024-6280: SourceCodester Simple Online Bidding System unrestricted upload
First published: Mon Jun 24 2024(Updated: )
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/ajax.php?action=save_settings. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269493 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Simple Online Bidding System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-6280?
CVE-2024-6280 has been classified as critical.
How do I fix CVE-2024-6280?
To fix CVE-2024-6280, restrict the file upload settings in the /admin/ajax.php?action=save_settings file.
What systems are affected by CVE-2024-6280?
CVE-2024-6280 affects SourceCodester Simple Online Bidding System version 1.0.
What type of attack does CVE-2024-6280 allow?
CVE-2024-6280 allows for unrestricted file uploads due to improper handling of the img argument.
Can CVE-2024-6280 lead to further vulnerabilities?
Yes, CVE-2024-6280 can open up the system to potential malicious uploads, leading to further security risks.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/oretnom23
- canonical/oretnom23 simple online bidding system
- version/oretnom23 simple online bidding system/1.0