CVE-2023-1826

MEDIUM

SourceCodester Online Computer and Laptop Store 1.0 - Unrestricted ...

Title source: llm

Description

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\system_info\index.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-224841 was assigned to this vulnerability.

Exploits (1)

exploitdb WORKING POC

by Matisse Beckandt · pythonwebappsphp

https://www.exploit-db.com/exploits/51358

View Code ZIP pw:eip

References (3)

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/171790/Online-Computer-And-Laptop-Store-1.0-Shell-Upload.html

[Permissions Required, Third Party Advisory] https://vuldb.com/?ctiid.224841

[Third Party Advisory] https://vuldb.com/?id.224841

Scores

CVSS v3 6.3

EPSS 0.0398

EPSS Percentile 88.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE

CWE-434

Status published

Products (1)

oretnom23/online_computer_and_laptop_store 1.0

Published Apr 04, 2023

Tracked Since Feb 18, 2026