CVE-2024-34833

2024-06-1721:15:50

[email protected]

web.nvd.nist.gov

file upload

image upload

php file

arbitrary code

web server

0.0004 Low

EPSS

Percentile

9.1%

JSON

Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the “save_settings” page. An unauthenticated attacker can leverage this functionality to upload a malicious PHP file instead. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as the user running the web server.