critical9.8
CVE-2024-34833
Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload.
Impact
Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settings" page. An unauthenticated attacker can leverage this functionality to upload a malicious PHP file instead. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as the user running the web server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oretnom23 | Payroll Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ShellUnease/payroll-management-system-rce
- https://packetstormsecurity.com/files/179106/Payroll-Management-System-1.0-Remote-Code-Execution.html
- https://github.com/ShellUnease/payroll-management-system-rce
- https://packetstormsecurity.com/files/179106/Payroll-Management-System-1.0-Remote-Code-Execution.html