CVE-2024-57668

In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:fabianros:shopping_portal:1.0:*:*:*:*:*:*:*

History

28 Feb 2025, 22:16

Type Values Removed Values Added
CWE CWE-434
CPE cpe:2.3:a:fabianros:shopping_portal:1.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
References () https://code-projects.org/shopping-portal-using-php-source-code/ - () https://code-projects.org/shopping-portal-using-php-source-code/ - Product
References () https://github.com/passevery/vul/issues/1 - () https://github.com/passevery/vul/issues/1 - Exploit, Third Party Advisory
First Time Fabianros
Fabianros shopping Portal

18 Feb 2025, 19:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.8
v2 : unknown
v3 : unknown
CWE CWE-434

07 Feb 2025, 16:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
CWE CWE-434
Summary
  • (es) En Code-projects Shopping Portal v1.0, la página insert-product.php tiene una vulnerabilidad de carga de archivos arbitrarios.

06 Feb 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-06 19:15

Updated : 2025-03-13 20:15


NVD link : CVE-2024-57668

Mitre link : CVE-2024-57668

CVE.ORG link : CVE-2024-57668


JSON object : View

Products Affected

fabianros

  • shopping_portal
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type