CVE-2024-57487

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server...

CVE-2024-57487

The Code-Projects Online Car Rental System 1.0 is vulnerable to an authenticated remote code execution (RCE) flaw within its file upload feature. The root cause is a failure to validate file extensions or MIME types , specifically on the changeimage1.php endpoint. This allows an authenticated att...

CVE-2024-57487

creationtimestamp| type| source ---|---|--- 2025-01-10 22:00:05+00:00| published-proof-of-concept| Telegram/QXMR7F2jdeVfadE0UadP87cUoa84idsqcIO-k-scJwjtY 2025-01-13 16:53:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113822087650712773 2025-01-13 16:53:48+00:00| seen|...