Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-30849 EUVD-2024-28768GHSA-ppf4-83qq-m3fm

Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via …

Published Apr 5, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via filename parameter in admin/products_photo.php.

References