CVE-2024-34833

Sourcecodester Payroll Management System v1.0 is vulnerable to an unrestricted file upload (CWE-434) on the "save_settings" page. An unauthenticated attacker can bypass image upload restrictions to upload a malicious PHP file , leading to remote code execution (RCE) as the web server user. The up...