PT-2024-24472 · Unknown · Phpgurukul Tourism Management System

Published 2024-04-16 · Updated 2024-11-06 · CVE-2024-32254

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Phpgurukul Tourism Management System version 2.0

Description The issue concerns an unrestricted upload of files with dangerous types via the tms/admin/create-package.php endpoint. When creating a new package, there are no checks for the types of files being uploaded from the image. This lack of validation allows for the potential upload of malicious files.

Recommendations For Phpgurukul Tourism Management System version 2.0, consider disabling the file upload functionality in the create-package.php script until a patch is available to add proper file type validation. Restrict access to the tms/admin/create-package.php endpoint to minimize the risk of exploitation. Avoid using this endpoint for file uploads until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-32254

Affected Products

Phpgurukul Tourism Management System

References · 7

• 🔥❌ https://github.com/jinhaochan/CVE-POC/blob/main/tms/POC.md · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2024-32254 · Security Note
• https://osv.dev/vulnerability/CVE-2024-32254 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1780311992055509051 · Twitter Post
• https://twitter.com/CVEnew/status/1780278111692558772 · Twitter Post
• https://twitter.com/oktsec/status/1780290773658796040 · Twitter Post
• https://t.me/cvenotify/76950 · Telegram Post