CVE-2024-6115
HIGHSimple Online Hotel Reservation System 1.0 - Unrestricted File Upload via add_room.php Photo Parameter
Title source: llmDescription
A vulnerability classified as critical was found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file add_room.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268867.
References (4)
Core 4
Core References
Third Party Advisory vdb-entry
technical-description
https://vuldb.com/?id.268867
Permissions Required, Third Party Advisory signature
permissions-required
https://vuldb.com/?ctiid.268867
Third Party Advisory third-party-advisory
https://vuldb.com/?submit.358996
Exploit, Third Party Advisory exploit
issue-tracking
https://github.com/wangyuan-ui/CVE/issues/5
Scores
CVSS v3
7.3
EPSS
0.0080
EPSS Percentile
51.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-434
Status
published
Products (2)
clive_21/simple_online_hotel_reservation_system
1.0
clivedelacruz/simple_online_hotel_reservation_system
1.0
Published
Jun 18, 2024
Tracked Since
Feb 18, 2026