CVE-2024-50649

The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...

CVE-2024-50650

pythonbook V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter...

CVE-2024-50649

The python_book V1.0 online book lending and management system contains an arbitrary file upload vulnerability within the user avatar upload function . This flaw, classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), allows an attacker to upload arbitrary files to...

CVE-2024-50650

The python_book online book lending and book management system, version V1.0 , is vulnerable to Incorrect Access Control (CWE-863). An attacker can exploit this flaw by modifying the ID parameter to obtain sensitive information belonging to users with different IDs. As of the current documentatio...

CVE-2024-50650

pythonbook V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter...

CVE-2024-50650: Incorrect Authorization

pythonbook V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter...

CVE-2024-50649: Improper Limitation of a Pathname to a Restricted Directory

The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...

CVE-2024-50649

The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...