CVE-2024-48454

The SourceCodester Purchase Order Management System v1.0 is vulnerable to Remote Code Execution (RCE) via the /admin?page=user component. The root cause is identified as the Unrestricted Upload of File with Dangerous Type (CWE-434). An attacker could potentially gain full system control, leading ...