CVE-2023-1942: fallo de gravedad media en SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store Avatar unrestricted upload
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.3epss 0.9%
A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/?page=user of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225319.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Online Computer and Laptop StoreCVEs relacionadas — SourceCodester Online Computer and Laptop Store
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-1826MEDIUMSourceCodester Online Computer and Laptop Store index.php unrestricted uploadEPSS 4.4%CVE-2024-4820MEDIUMSourceCodester Online Computer and Laptop Store unrestricted uploadEPSS 1.1%CVE-2023-1956MEDIUMSourceCodester Online Computer and Laptop Store Image path traversalEPSS 1.1%CVE-2024-4798MEDIUMSourceCodester Online Computer and Laptop Store manage_brand.php sql injectionEPSS 0.9%CVE-2023-5373HIGHSourceCodester Online Computer and Laptop Store Master.php register sql injectionEPSS 0.9%CVE-2023-2658MEDIUMSourceCodester Online Computer and Laptop Store products.php sql injectionEPSS 0.9%