CVE-2023-1734

CWE-434 — Unrestricted File Upload5 documents4 sources
Severity
9.8CRITICAL
EPSS
0.3%
top 47.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Young Entrepreneur E-negosyo SystemYoung Entrepreneur E-negosyo System Project Young Entrepreneur E-negosyo System
Timeline
PublishedMar 30
Latest updateJun 13

Description

A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected is an unknown function of the file admin/products/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. VDB-224622 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 3.9 | Impact: 3.4

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
SourceCodester Young Entrepreneur E-Negosyo System unrestricted upload↗2023-03-30
▶
GHSA
GHSA-j2v6-jq3p-wj4f: A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1↗2023-03-30
▶

🕵️Threat Intelligence

2
Talos
Two remote code execution vulnerabilities disclosed in Microsoft Excel↗2023-06-13
▶
Talos
Two remote code execution vulnerabilities disclosed in Microsoft Excel↗2023-06-13
▶
CVE-2023-1734 (CRITICAL CVSS 9.8) | A vulnerability classified as criti | cvebase.io