critical9.8
CVE-2024-30849
Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via filename parameter i…
Impact
Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via filename parameter in admin/products_photo.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Donbermoy | Complete E-Commerce Site | Version 1.0 |