CVE-2024-36569

The Sourcecodester Gas Agency Management System v1.0 is vulnerable to arbitrary code execution via the editClientImage.php file. The root cause is identified as an Improper Control of Filename for Include/Require Statement in PHP Program (CWE-98), which could lead to unauthorized access and contr...