CVE-2024-2690

CVE-2024-2690 affects SourceCodester Online Discussion Forum Site 1.0. The vulnerability lies in an unauthenticated, remote exploit via the /uupdate.php file, where manipulating the parameter named likely “ima” leads to unrestricted file upload. Multiple sources describe this as a critical issue ...