VULNERABILITY INTELLIGENCE

CVE-2024-7450

CVSS score6.3 MEDIUM

EPSS probability0.63%

CISA KEVNot currently listed

Published2024-08-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resume_upload.php of the component Image Handler. The manipulation of the argument fileToUpload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273541 was assigned to this vulnerability.

Weakness classification

cna@vuldb.com: CWE-434

Primary references

cna@vuldb.com — Exploit
cna@vuldb.com — Permissions Required, Third Party Advisory
cna@vuldb.com — Third Party Advisory
cna@vuldb.com — Third Party Advisory