CVE-2024-8341: SourceCodester Petshop Management System add_user.php unrestricted upload
A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0. This vulnerability affects unknown code of the file /controllers/adduser.php. The manipulation of the argument avatar leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8341?
CVE-2024-8341 is classified as a critical vulnerability.
How does CVE-2024-8341 allow attackers to exploit the system?
CVE-2024-8341 allows attackers to exploit the system through unrestricted file uploads via the avatar argument in the add_user.php file.
Which version of the SourceCodester Petshop Management System is affected by CVE-2024-8341?
CVE-2024-8341 affects SourceCodester Petshop Management System version 1.0.
Can CVE-2024-8341 be exploited remotely?
Yes, CVE-2024-8341 can be exploited remotely by attackers.
What are the potential impacts of CVE-2024-8341 on the system?
The potential impacts of CVE-2024-8341 include unauthorized access and possible compromise of the system due to unrestricted file uploads.