GO-2024-2690 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2024-2690 vulnerabilities

Vulnerabilities for packages: k3d...

CVE-2024-2690

CVE-2024-2690 affects SourceCodester Online Discussion Forum Site 1.0. The vulnerability lies in an unauthenticated, remote exploit via the /uupdate.php file, where manipulating the parameter named likely “ima” leads to unrestricted file upload. Multiple sources describe this as a critical issue ...