CVE-2024-2058 SourceCodester Petrol Pump Management Software product.php unrestricted upload

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be...

CVE-2024-2058

CVE-2024-2058 affects SourceCodester Petrol Pump Management Software 1.0. The vulnerability is in the /admin/app/product.php file, where manipulating the photo parameter enables unrestricted file upload. The issue is exploitable remotely, and multiple sources indicate the exploit has been disclos...