Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jadore147258369

#25807of 53,633
9.8Total CVSS
Vulnerabilities · 1
PT-2023-23492
9.8
2023-05-16
Unknown · Sourcecodester Online Computer/Laptop Store · CVE-2023-31857
**Name of the Vulnerable Software and Affected Versions** Sourcecodester Online Computer and Laptop Store version 1.0 **Description** The issue allows unrestricted file upload, which can lead to remote code execution. The vulnerability path is "/classes/Users.php?f=save". **Recommendations** For version 1.0, restrict access to the "/classes/Users.php?f=save" endpoint to minimize the risk of exploitation. Consider implementing proper file upload validation and sanitization to prevent malicious file uploads. As a temporary workaround, consider disabling the file upload functionality in the Users.php file until a patch is available.