SourceCodester Zipped Folder Manager App add-folder.php unrestricted upload

Vulnerability

An unrestricted file upload vulnerability exists in the /endpoint/add-folder.php endpoint of SourceCodester Zipped Folder Manager App 1.0. The folder parameter is not properly sanitized, allowing an attacker to upload arbitrary files to the server.

Exploitation

The attack can be performed remotely without authentication. An attacker sends a crafted HTTP request to the vulnerable endpoint, manipulating the folder parameter to include a malicious file (e.g., a PHP shell). The file is then stored on the server.

Impact

Successful exploitation allows the attacker to upload arbitrary files, potentially leading to remote code execution, unauthorized data access, or complete compromise of the web server.

Mitigation

As of publication, no official patch has been released. Users should consider removing or restricting access to the vulnerable endpoint, implementing strict file upload validation, or using a web application firewall to block malicious requests.