High severity8.8NVD Advisory· Published Apr 16, 2024· Updated Jun 17, 2026
CVE-2024-32254
CVE-2024-32254
Description
Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php. When creating a new package, there is no checks for what types of files are uploaded from the image.
Affected products
3(expand)+ 2 more
- (no CPE)
- (no CPE)range: = 2.0
- cpe:2.3:a:phpgurukul:tourism_management_system:2.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/jinhaochan/CVE-POC/blob/main/tms/POC.mdnvdBroken LinkExploitThird Party Advisory
News mentions
0No linked articles in our index yet.