CVE-2024-4349CWE-434

SourceCodester Pisay Online E-Learning System controller.php unrestricted upload

High · published April 30, 2024

CVSS v3.1
7.3
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /lesson/controller.php. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-262489 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01035 · 63.6th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-04-30T23:00Z
EPSS history
Timeline
  • 30 APR 23:00Z
    SourceCodester Pisay Online E-Learning System controller.php unrestricted upload
    cvelistv5