CVE-2024-0192

RRJ Nueva Ecija Engineer Online Portal 1.0 is affected by a vulnerability in the Add Downloadable component, specifically the downloadable.php functionality, which allows unrestricted file upload. The issue can be exploited remotely and the exploit has been publicly disclosed. Root cause is a cod...