CVE-2024-2059

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/app/service_crud.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-255374 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Mar 1, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-20607.2A vulnerability classified as critical has been found in SourceCodester Petrol Pump Management Software 1.0. This affects an unknown part of CVE-2024-20617.2A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerability affects unknown c CVE-2024-20627.2A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. This issue affects CVE-2024-20634.8A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknow CVE-2024-20644.3A vulnerability has been found in rahman SelectCours 1.0 and classified as problematic. Affected by this vulnerability is the function getCa CVE-2024-20656.1A vulnerability was found in SourceCodester Barangay Population Monitoring System up to 1.0 and classified as problematic. Affected by this CVE-2024-206528.1Windows HTML Platforms Security Feature Bypass Vulnerability CVE-2024-206537.8Microsoft Common Log File System Elevation of Privilege Vulnerability CVE-2024-206548.0Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-206556.6Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability CVE-2024-206567.8Visual Studio Elevation of Privilege Vulnerability CVE-2024-206577.0Windows Group Policy Elevation of Privilege Vulnerability