CVE-2024-42767

Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload leading to Remote Code Execution (RCE) . The root cause is a lack of validation for uploaded files in the /admin/add_room_controller.php endpoint. An attacker can exploit this to upload malicious files and execute ar...