Vulnerability · Published Apr 4, 2023 · Assigned by VulDB

CVE-2023-1826SourceCodester Online Computer and Laptop Store index.php unrestricted upload

Medium 6.3

In plain English

A medium-severity unrestricted file upload in Online Computer and Laptop Store from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.4% (higher than 91% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)4.4%top 8.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\system_info\index.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-224841 was assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Online Computer and Laptop Store	1.0

Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

https://vuldb.com/?id.224841 vdb-entry, technical-description
https://vuldb.com/?ctiid.224841 signature, permissions-required
http://packetstormsecurity.com/files/171790/Online-Computer-And-Laptop-Store-1.0-Shell-Upload.html related