PT-2024-16691 · Unknown · Codeastro Real Estate Management System
Flowertu
·
Published
2024-11-08
·
Updated
2025-06-04
·
CVE-2024-10999
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
CodeAstro Real Estate Management System version 1.0
Description
A vulnerability has been found in the CodeAstro Real Estate Management System. The issue is related to an unknown function of the file /aboutadd.php of the component About Us Page. The manipulation of the argument
aimage leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Recommendations
For CodeAstro Real Estate Management System version 1.0, consider disabling the upload functionality in the /aboutadd.php file until a patch is available. Restrict access to the About Us Page to minimize the risk of exploitation. Avoid using the argument
aimage in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Improper Access Control
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Codeastro Real Estate Management System