PT-2024-16693 · Unknown · Codeastro Real Estate Management System
Egsec
·
Published
2024-11-08
·
Updated
2025-06-04
·
CVE-2024-11000
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
CodeAstro Real Estate Management System version 1.0
Description
A problematic vulnerability was found in the CodeAstro Real Estate Management System. The issue affects an unknown functionality of the file /aboutedit.php of the component About Us Page. The manipulation of the
aimage argument leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Recommendations
For CodeAstro Real Estate Management System version 1.0, consider disabling the upload functionality in the /aboutedit.php file until a patch is available. Restrict access to the About Us Page to minimize the risk of exploitation. Avoid using the
aimage argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Improper Access Control
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Codeastro Real Estate Management System