A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects unknown code. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257770 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/CveSecLook/cve/issues/1 | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.257770 | Permissions Required VDB Entry |
| https://vuldb.com/?id.257770 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.303123 | Third Party Advisory VDB Entry |
| https://github.com/CveSecLook/cve/issues/1 | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.257770 | Permissions Required VDB Entry |
| https://vuldb.com/?id.257770 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.303123 | Third Party Advisory VDB Entry |
Configurations
History
18 Feb 2025, 16:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/CveSecLook/cve/issues/1 - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.257770 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.257770 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.303123 - Third Party Advisory, VDB Entry | |
| First Time |
Ganeshrkt simple File Manager Web App
Ganeshrkt |
|
| CPE | cpe:2.3:a:ganeshrkt:simple_file_manager_web_app:1.0:*:*:*:*:*:*:* |
Information
Published : 2024-03-23 18:15
Updated : 2025-02-18 16:57
NVD link : CVE-2024-2849
Mitre link : CVE-2024-2849
CVE.ORG link : CVE-2024-2849
JSON object : View
Products Affected
ganeshrkt
- simple_file_manager_web_app
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type