VULNERABILITY INTELLIGENCE

CVE-2024-10764

CVSS score6.3 MEDIUM

EPSS probability0.53%

CISA KEVNot currently listed

Published2024-11-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/save_user.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Weakness classification

cna@vuldb.com: CWE-266
nvd@nist.gov: CWE-434

Primary references

cna@vuldb.com — Exploit, Third Party Advisory
cna@vuldb.com — Permissions Required, Third Party Advisory
cna@vuldb.com — Third Party Advisory
cna@vuldb.com — Third Party Advisory