Description
A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Real Estate Property Listing App | 1.0 | — |
References
- VDB-335871 | SourceCodester Real Estate Property Listing App property.php unrestricted upload vdb-entry technical-description
- VDB-335871 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #703238 | SourceCodester Real Estate Property Listing App Using PHP and MySQL with Source Code 1 Unrestricted Upload third-party-advisory
- https://github.com/zzdzz7/cve/issues/2 broken-link exploit issue-tracking
- https://www.sourcecodester.com/ product