Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2293-8xx3-2x87

Опубликовано: 28 мая 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 7.3

Описание

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_order_customer_update.php. The manipulation of the argument uploaded_file_cancelled leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_order_customer_update.php. The manipulation of the argument uploaded_file_cancelled leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 12%
0.00042
Низкий

6.9 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 7.3
nvd
23 дня назад

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_order_customer_update.php. The manipulation of the argument uploaded_file_cancelled leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 12%
0.00042
Низкий

6.9 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-284