PT-2024-27071 · Sourcecodester · Sourcecodester Garage Management System

白万荣 · Published 2024-06-03 · Updated 2024-07-03 · CVE-2024-36569

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester Gas Agency Management System version 1.0

Description The issue allows for arbitrary code execution via the editClientImage.php file. This could potentially lead to unauthorized access and control of the system.

Recommendations For Sourcecodester Gas Agency Management System version 1.0, consider removing or restricting access to the editClientImage.php file until a patch is available. As a temporary workaround, restrict the execution of arbitrary code in this file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2024-36569

Affected Products

Sourcecodester Garage Management System

References · 6

• 🔥 https://github.com/debug601/bug_report/blob/main/vendors/mayuri_k/gas-agency-management-system/RCE-1.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-36569 · Security Note
• https://osv.dev/vulnerability/CVE-2024-36569 · Vendor Advisory
• https://twitter.com/CVEnew/status/1797624239232516530 · Twitter Post
• https://t.me/cvenotify/81767 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1797668912655458601 · Twitter Post