CVE-2024-8342: SourceCodester Petshop Management System add_client.php unrestricted upload
A vulnerability, which was classified as critical, has been found in SourceCodester Petshop Management System 1.0. This issue affects some unknown processing of the file /controllers/addclient.php. The manipulation of the argument imageprofile leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8342?
CVE-2024-8342 is classified as a critical vulnerability.
What software is affected by CVE-2024-8342?
CVE-2024-8342 affects SourceCodester Petshop Management System version 1.0.
How does CVE-2024-8342 exploit the system?
CVE-2024-8342 allows unrestricted upload due to unsafe processing of the image_profile argument in the add_client.php file.
How do I fix CVE-2024-8342?
To fix CVE-2024-8342, ensure proper validation and sanitization of file uploads in the affected file.
What are the potential impacts of CVE-2024-8342?
The exploitation of CVE-2024-8342 can lead to unauthorized file uploads, potentially resulting in further security breaches.