CVE-2024-48581 — Code Injection in Best Courier Management System

CWE-94 — Code Injection3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
2.9%
top 13.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mayurik Best Courier Management System
Timeline
PublishedOct 25

Description

File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the admin_class.php component.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-px64-cpgr-654p: File Upload vulnerability in Best courier management system in php v↗2024-10-25
▶
CVEList
CVE-2024-48581: File Upload vulnerability in Best courier management system in php v↗2024-10-25
▶
CVE-2024-48581 — Code Injection | cvebase