Unrated severityNVD Advisory· Published Jun 15, 2023· Updated Aug 2, 2024

code-projects Supplier Management System Picture btn_functions.php unrestricted upload

CVE-2023-3274

Description

A vulnerability classified as critical has been found in code-projects Supplier Management System 1.0. Affected is an unknown function of the file btn_functions.php of the component Picture Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231624.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Campcodes/Supplier Management Systemllm-fuzzy
Range: =1.0
Code Projects/Content Management Systemcpe-rescue
Range: 1.0

Patches

Vulnerability mechanics

References

github.com/wuyangzihan/SUPPLIER-MANAGEMENT-SYSTEM/blob/main/SUPPLIER%20MANAGEMENT%20SYSTEM%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdfmitreexploit
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000