CVE-2024-10410: falha de média gravidade em SourceCodester Online Hotel Reservation System
SourceCodester Online Hotel Reservation System controller.php upload unrestricted upload
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 1.2%
A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. Affected by this vulnerability is the function upload of the file /admin/mod_room/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
SourceCodester · Online Hotel Reservation SystemCVEs relacionadas — SourceCodester Online Hotel Reservation System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-8470MEDIUMSourceCodester Online Hotel Reservation System deleteroom.php sql injectionEPSS 0.6%CVE-2025-8469MEDIUMSourceCodester Online Hotel Reservation System deletegallery.php sql injectionEPSS 0.6%CVE-2024-10413MEDIUMSourceCodester Online Hotel Reservation System update.php upload unrestricted uploadEPSS 0.5%CVE-2025-6355MEDIUMSourceCodester Online Hotel Reservation System execeditroom.php sql injectionEPSS 0.5%CVE-2025-9789MEDIUMSourceCodester Online Hotel Reservation System edituser.php sql injectionEPSS 0.5%CVE-2025-11055MEDIUMSourceCodester Online Hotel Reservation System updateaddress.php sql injectionEPSS 0.5%