Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Jadore147258369

#24387de 53,638
9.8CVSS total
Vulnerabilidades · 1
PT-2023-23492
9.8
2023-05-16
Unknown · Sourcecodester Online Computer/Laptop Store · CVE-2023-31857
**Name of the Vulnerable Software and Affected Versions** Sourcecodester Online Computer and Laptop Store version 1.0 **Description** The issue allows unrestricted file upload, which can lead to remote code execution. The vulnerability path is "/classes/Users.php?f=save". **Recommendations** For version 1.0, restrict access to the "/classes/Users.php?f=save" endpoint to minimize the risk of exploitation. Consider implementing proper file upload validation and sanitization to prevent malicious file uploads. As a temporary workaround, consider disabling the file upload functionality in the Users.php file until a patch is available.