8 matches found
CVE-2024-50649
The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...
CVE-2024-50650
pythonbook V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter...
CVE-2024-50650
pythonbook V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter...
CVE-2024-50650: Incorrect Authorization
pythonbook V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter...
CVE-2024-50650
The python_book online book lending and book management system, version V1.0 , is vulnerable to Incorrect Access Control (CWE-863). An attacker can exploit this flaw by modifying the ID parameter to obtain sensitive information belonging to users with different IDs. As of the current documentatio...
CVE-2024-50649
The user avatar upload function in pythonbook V1.0 has an arbitrary file upload vulnerability...
CVE-2024-50649
The python_book V1.0 online book lending and management system contains an arbitrary file upload vulnerability within the user avatar upload function . This flaw, classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), allows an attacker to upload arbitrary files to...