CVE-2024-9815
CVE-2024-9815
Título es
CVE-2024-9815
Jue, 10/10/2024 – 22:15
Tipo
CWE-434
Gravedad v2.0
5.80
Gravedad 2.0 Txt
MEDIUM
Título en
CVE-2024-9815
Descripción en
A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
11/10/2024
11/10/2024
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Vector CVSS:2.0
AV:N/AC:L/Au:M/C:P/I:P/A:P
Gravedad 3.1 (CVSS 3.1 Base Score)
4.70
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
MEDIUM
Referencias
Enviar en el boletín
Off
