PT-2024-36489 · Unknown · Itsourcecode Online Discussion Forum

N3Xu5Cr4Ck37 · Published 2024-05-30 · Updated 2025-02-11 · CVE-2024-5518

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions itsourcecode Online Discussion Forum version 1.0

Description A critical issue has been found in the itsourcecode Online Discussion Forum, affecting the file change profile picture.php. The manipulation of the image argument leads to unrestricted upload. This issue can be initiated remotely.

Recommendations For itsourcecode Online Discussion Forum version 1.0, consider restricting access to the change profile picture.php file to minimize the risk of exploitation. As a temporary workaround, avoid using the image argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-5518

Affected Products

Itsourcecode Online Discussion Forum

References · 7

• 🔥 https://github.com/L1OudFd8cl09/CVE/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-5518 · Security Note
• https://osv.dev/vulnerability/CVE-2024-5518 · Vendor Advisory
• https://t.me/cvenotify/110827 · Telegram Post
• https://vuldb.com/?id.266589 · Note
• https://vuldb.com/?submit.346309 · Note
• https://vuldb.com/?ctiid.266589 · Note