CVE-2024-50649

The python_book V1.0 online book lending and management system contains an arbitrary file upload vulnerability within the user avatar upload function . This flaw, classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), allows an attacker to upload arbitrary files to...

CVE-2024-50650

The python_book online book lending and book management system, version V1.0 , is vulnerable to Incorrect Access Control (CWE-863). An attacker can exploit this flaw by modifying the ID parameter to obtain sensitive information belonging to users with different IDs. As of the current documentatio...