Unknown · Sourcecodester Online Computer/Laptop Store · CVE-2023-31857
**Name of the Vulnerable Software and Affected Versions**
Sourcecodester Online Computer and Laptop Store version 1.0
**Description**
The issue allows unrestricted file upload, which can lead to remote code execution. The vulnerability path is "/classes/Users.php?f=save".
**Recommendations**
For version 1.0, restrict access to the "/classes/Users.php?f=save" endpoint to minimize the risk of exploitation. Consider implementing proper file upload validation and sanitization to prevent malicious file uploads. As a temporary workaround, consider disabling the file upload functionality in the Users.php file until a patch is available.