3 matches found
CVE-2024-50649
The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...
9.8CVSS0.00989EPSS
SaveExploits1References2
CVE-2024-50649
The python_book V1.0 online book lending and management system contains an arbitrary file upload vulnerability within the user avatar upload function . This flaw, classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), allows an attacker to upload arbitrary files to...
9.8CVSS7.1AI score0.00989EPSS
SaveExploits1References2Affected Software1
20