Description
A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the function UpdateDocumentsRequest of the file DocumentsController.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| itsourcecode | Laravel Property Management System | 1.0 | — |
References
- VDB-275136 | itsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted upload vdb-entry technical-description
- VDB-275136 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #393372 | itsourcecode Laravel Property Management System v1.0 FileUpload third-party-advisory
- https://github.com/DeepMountains/zzz/blob/main/CVE2-2.md exploit