CVE-2024-51208 — Unrestricted File Upload in Boat Booking System

CWE-434 — Unrestricted File Upload3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.1%
top 66.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Boat Booking System
Timeline
PublishedNov 20

Description

File Upload vulnerability in change-image.php in Anuj Kumar's Boat Booking System version 1.0 allows local attackers to upload a malicious PHP script via the Image Upload Mechanism parameter.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-3gr8-4rjx-crp8: File Upload vulnerability in change-image↗2024-11-20
▶
CVEList
CVE-2024-51208: File Upload vulnerability in change-image↗2024-11-20
▶
CVE-2024-51208 — Unrestricted File Upload | cvebase