CVE-2024-3521

The CVE-2024-3521 case covers Byzoro Smart S80 Management Platform (versions up to 20240317). The root cause is in /useratte/userattestation.php where the web_img parameter enables unrestricted upload, enabling a remote attacker to upload arbitrary content. Documents indicate the vulnerability is...