CVE-2024-40394

The Simple Library Management System Project Using PHP/MySQL v1.0 is affected by an arbitrary file upload vulnerability located in the ajax.php component. This flaw allows for the unrestricted upload of files with dangerous types, potentially leading to high impact on confidentiality, integrity, ...