PT-2026-47008 · Code Projects · Vehicle Management System

Imad Alvi · CVE-2026-11344 · Published 2026-06-05 · Updated 2026-06-07

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions code-projects Vehicle Management System version 1.0

Description An unrestricted file upload issue exists within the New Driver Registration Form component in the file 'newdriver.php'. A remote attacker can achieve this by manipulating the photo argument, allowing the upload of unauthorized files.

Recommendations Update code-projects Vehicle Management System to a version that resolves this issue. As a temporary workaround, restrict access to the 'newdriver.php' file or the New Driver Registration Form component.

Exploit

Fix

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2026-11344

Affected Products

Vehicle Management System

References · 9

• 🔥❌ https://github.com/Xmyronn/Vehicle-Management-System-In-PHP---Unauthenticated-Remote-Code-Execution.git · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2026-11344 · Security Note
• https://twitter.com/HugoValters/status/2063599880837181864 · Twitter Post
• https://code-projects.org · Note
• https://vuldb.com/vuln/368884/cti · Note
• https://twitter.com/VulmonFeeds/status/2063006848920244515 · Twitter Post
• https://vuldb.com/submit/833153 · Note
• https://vuldb.com/vuln/368884 · Note
• https://vuldb.com/cve/CVE-2026-11344 · Note