CVE-2024-7910: CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload

Published Aug 18, 2024

Updated

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/emp-profile-avatar.php of the component Profile Photo Update Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Online Railway Reservation System Project Online Railway Reservation System=1.0

Event History

Aug 18, 2024

CVE Published

via MITRE·06:31 PM

Data Sourced

via MITRE·06:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-7910?

CVE-2024-7910 is classified as a critical vulnerability.

How do I fix CVE-2024-7910?

To fix CVE-2024-7910, it is recommended to update the CodeAstro Online Railway Reservation System to the latest version.

What component is affected by CVE-2024-7910?

CVE-2024-7910 affects the Profile Photo Update Handler in the file /admin/emp-profile-avatar.php.

What type of vulnerability is CVE-2024-7910?

CVE-2024-7910 is a manipulation vulnerability that leads to unrestricted access.

Which version of the software is impacted by CVE-2024-7910?

CVE-2024-7910 impacts version 1.0 of the CodeAstro Online Railway Reservation System.