medium6.3Public exploit code
CVE-2023-1826
A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Online Computer and Laptop Store 1.0 - Remote Code Execution (RCE)2023-04-10 · webapps · php
Impact
A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\system_info\index.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-224841 was assigned to this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oretnom23 | Online Computer And Laptop Store | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171790/Online-Computer-And-Laptop-Store-1.0-Shell-Upload.html
- https://vuldb.com/?ctiid.224841
- https://vuldb.com/?id.224841
- http://packetstormsecurity.com/files/171790/Online-Computer-And-Laptop-Store-1.0-Shell-Upload.html
- https://vuldb.com/?ctiid.224841
- https://vuldb.com/?id.224841