CVE-2024-12951mediumCWE-284CWE-434

CVE-2024-12951: fallo de gravedad media en 1000 Projects Portfolio Management System MCA

1000 Projects Portfolio Management System MCA add_personal_details.php unrestricted upload

Publicada el

Seguir esta CVE+ Monitorear Portfolio Management System MCA

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.7%
A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /add_personal_details.php. The manipulation of the argument profile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
1000 Projects · Portfolio Management System MCA
CVEs relacionadas — 1000 Projects Portfolio Management System MCA

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-12960MEDIUM1000 Projects Portfolio Management System MCA update_edu_details.php sql injectionEPSS 0.8%CVE-2024-12959MEDIUM1000 Projects Portfolio Management System MCA update_personal_details.php sql injectionEPSS 0.8%CVE-2024-12958MEDIUM1000 Projects Portfolio Management System MCA update_pro_details.php sql injectionEPSS 0.8%CVE-2024-12954MEDIUM1000 Projects Portfolio Management System MCA update_ach.php unrestricted uploadEPSS 0.7%CVE-2024-12953MEDIUM1000 Projects Portfolio Management System MCA update_pd_process.php unrestricted uploadEPSS 0.7%CVE-2024-11744MEDIUM1000 Projects Portfolio Management System MCA register.php sql injectionEPSS 0.7%