Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Fanyz

#25568of 53,630
9.8Total CVSS
Vulnerabilities · 1
PT-2024-22448
9.8
2024-03-23
Sourcecodester · Sourcecodester Simple File Manager · CVE-2024-2849
**Name of the Vulnerable Software and Affected Versions** SourceCodester Simple File Manager version 1.0 **Description** A critical vulnerability was found in the software, affecting unknown code. The manipulation of the `photo` argument leads to unrestricted upload. The attack can be initiated remotely. **Recommendations** For version 1.0, consider disabling the file upload feature until a patch is available to prevent unrestricted upload. Restrict access to the `photo` argument to minimize the risk of exploitation.