Vulnerability · Published Mar 20, 2024 · Assigned by VulDB
CVE-2024-2690SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload
Medium 6.3
In plain English
A medium-severity unrestricted file upload in Online Discussion Forum Site from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Official description
A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been classified as critical. Affected is an unknown function of the file /uupdate.php. The manipulation of the argument ima leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257388.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Online Discussion Forum Site | 1.0 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- VDB-257388 | SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload vdb-entry, technical-description
- VDB-257388 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- https://github.com/wkeyi0x1/vul-report/issues/2 exploit, issue-tracking