CVE-2024-8342— SourceCodester Petshop Management System 代码问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2024-8342の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
SourceCodester Petshop Management System add_client.php unrestricted upload
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability, which was classified as critical, has been found in SourceCodester Petshop Management System 1.0. This issue affects some unknown processing of the file /controllers/add_client.php. The manipulation of the argument image_profile leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
危险类型文件的不加限制上传
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
SourceCodester Petshop Management System 代码问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
SourceCodester Petshop Management System是SourceCodester开源的一个宠物店管理系统。 SourceCodester Petshop Management System 1.0 版本存在代码问题漏洞，该漏洞源于 /controllers/add_client.php 页面的 image_profile 参数存在一个不受限制的文件上传漏洞。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| SourceCodester | Petshop Management System | 1.0 | - |
II. CVE-2024-8342の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2024-8342のインテリジェンス情報
请登录查看更多情报信息。
- CVE-2024-8342 SourceCodester Petshop Management System add_client.php unrestricted uploadvdb-entrytechnical-description
- https://nvd.nist.gov/vuln/detail/CVE-2024-8342
Same Patch Batch · SourceCodester · 2024-08-30 · 11 CVEs total
| CVE-2024-8340 | 7.3 HIGH | SourceCodester Electric Billing Management System Actions.php sql injection |
| CVE-2024-8343 | 7.3 HIGH | SourceCodester Sentiment Based Movie Rating System User Registration Users.php sql injecti |
| CVE-2024-8336 | 6.3 MEDIUM | SourceCodester Music Gallery Site Master.php sql injection |
| CVE-2024-8339 | 6.3 MEDIUM | SourceCodester Electric Billing Management System Connection Code ?page=tracks sql injecti |
| CVE-2024-8341 | 6.3 MEDIUM | SourceCodester Petshop Management System add_user.php unrestricted upload |
| CVE-2024-8345 | 6.3 MEDIUM | SourceCodester Music Gallery Site Users.php sql injection |
| CVE-2024-8346 | 6.3 MEDIUM | SourceCodester Computer Laboratory Management System SystemSettings.php update_settings_in |
| CVE-2024-8347 | 6.3 MEDIUM | SourceCodester Computer Laboratory Management System Master.php delete_record sql injectio |
| CVE-2024-8348 | 6.3 MEDIUM | SourceCodester Computer Laboratory Management System Master.php delete_category sql inject |
| CVE-2024-8337 | 3.5 LOW | SourceCodester Contact Manager with Export to VCF index.html cross site scripting |
IV. 関連脆弱性
同じベンダー: SourceCodester
- CVE-2026-8136
SourceCodester Pharmacy Sales and Inventory System index.php - CVE-2026-8131
SourceCodester SUP Online Shopping replymsg.php sql injectio - CVE-2026-8130
SourceCodester SUP Online Shopping message.php sql injection - CVE-2026-8129
SourceCodester SUP Online Shopping wishlist.php sql injectio - CVE-2026-8128
SourceCodester SUP Online Shopping viewmsg.php sql injection
同じ弱点: CWE-434
- CVE-2021-47943
TextPattern CMS 4.8.7 Remote Code Execution via File Upload - CVE-2021-47937
e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme - CVE-2026-41517
Emlog: Remote Code Execution via Malicious Plugin Upload - CVE-2026-6692
Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber - CVE-2026-41587
CI4MS: Unrestricted PHP File Upload via Theme Installation L
V. CVE-2024-8342へのコメント
まだコメントはありません