CVE-2024-30849

CVE-2024-30849 affects Sourcecodester Complete E-Commerce Site v1.0. An arbitrary file upload vulnerability exists in admin/products_photo.php via the filename parameter, allowing remote attackers to execute arbitrary code. The CVSSv3.1 vector indicates Network access, Low attack complexity, No p...

CVE-2024-2754

CVE-2024-2754 concerns SourceCodester Complete E-Commerce Site 1.0, where an unspecified function in /admin/users_photo.php mishandles the photo parameter, resulting in an unrestricted upload. Multiple connected sources confirm remote exploitation potential and public disclosure of the exploit. R...