CVE-2024-30849: Improper Control of Filename for Include/Require Statement in PHP Program

Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via filename parameter in admin/productsphoto.php...

CVE-2024-2754: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in SourceCodester Complete E-Commerce Site 1.0. Affected is an unknown function of the file /admin/usersphoto.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit h...

SourceCodester E-Commerce Site 代码问题漏洞

E-Commerce Site is an e-commerce website. A code issue vulnerability exists in SourceCodester Complete E-Commerce Site version 1.0, which stems from a file upload vulnerability in file /admin/usersphoto.php...