CVE-2024-51788

CRITICAL

The Novel Design Store Directory <4.3.0 - Unrestricted Upload of Fi...

Title source: llm

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through <= 4.3.0.

Exploits (2)

nomisec WORKING POC 2 stars
by Nxploited · poc
https://github.com/Nxploited/CVE-2024-51788
github WORKING POC
by Boshe99 · pythonpoc
https://github.com/Boshe99/CVE-Exploits/tree/main/CVE-2024-51788

Scores

CVSS v3 10.0
EPSS 0.6213
EPSS Percentile 98.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-434
Status published
Products (1)
Joshua Wolfe/The Novel Design Store Directory < 4.3.0
Published Nov 11, 2024
Tracked Since Feb 18, 2026