CVE-2024-9816: Codezips Tourist Management System change-image.php unrestricted upload
A vulnerability was found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9816?
CVE-2024-9816 is classified as a critical vulnerability.
How do I fix CVE-2024-9816?
To fix CVE-2024-9816, ensure that file uploads are properly validated and restricted in the application.
What is the impact of CVE-2024-9816?
The impact of CVE-2024-9816 includes the potential for an attacker to upload malicious files due to unrestricted upload functionality.
Which version of Codezips Tourist Management System is affected by CVE-2024-9816?
CVE-2024-9816 affects Codezips Tourist Management System version 1.0.
What is the vulnerable component in CVE-2024-9816?
The vulnerable component in CVE-2024-9816 is the file /admin/change-image.php.