CVE-2023-1479

MEDIUM

SourceCodester Simple Music Player 1.0 - Unrestricted Upload

Title source: llm
STIX 2.1

Description

A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file save_music.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223362 is the identifier assigned to this vulnerability.

References (3)

Core 3
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.223362
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.223362

Scores

CVSS v3 6.3
EPSS 0.0047
EPSS Percentile 64.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-434
Status published
Products (1)
simple_music_player_project/simple_music_player 1.0
Published Mar 18, 2023
Tracked Since Feb 18, 2026