CVE-2024-42777

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.
Configurations

Configuration 1 (hide)

cpe:2.3:a:lopalopa:music_management_system:1.0:*:*:*:*:*:*:*

History

23 Aug 2024, 16:09

Type Values Removed Values Added
First Time Lopalopa music Management System
Lopalopa
References () https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Music%20Management%20System%20v1.0/Unrestricted%20File%20Upload%20-%20SignUp.pdf - () https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Music%20Management%20System%20v1.0/Unrestricted%20File%20Upload%20-%20SignUp.pdf - Exploit, Third Party Advisory
CPE cpe:2.3:a:lopalopa:music_management_system:1.0:*:*:*:*:*:*:*

22 Aug 2024, 12:48

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad de carga de archivos sin restricciones en "/music/ajax.php?action=signup" de Kashipara Music Management System v1.0, que permite a los atacantes ejecutar código arbitrario cargando un archivo PHP manipulado.

21 Aug 2024, 21:35

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-21 18:15

Updated : 2024-08-23 16:09


NVD link : CVE-2024-42777

Mitre link : CVE-2024-42777

CVE.ORG link : CVE-2024-42777


JSON object : View

Products Affected

lopalopa

  • music_management_system
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type