CVE-2024-53345

Car Rental Management System (CRMS) versions 1.0–1.3 are affected by an authenticated arbitrary file upload vulnerability that enables remote code execution. The root cause is insufficient validation and access control on the uploads directory, allowing low-privileged users to upload executable P...