CVE-2024-4349

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /lesson/controller.php. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-262489 was assigned to this vulnerability.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Apr 30, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-434919.8Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional ComponenCVE-2024-434927.8Microsoft AutoUpdate (MAU) Elevation of Privilege VulnerabilityCVE-2024-434957.3Windows libarchive Remote Code Execution VulnerabilityCVE-2024-434968.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2024-434977.8DeepSpeed Remote Code Execution VulnerabilityCVE-2024-434989.8.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2024-434997.5.NET and Visual Studio Denial of Service VulnerabilityCVE-2024-43504.8Concrete CMS versions 9.0.0 to 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in RSS Displayer when user input is stored and later embeCVE-2024-435005.5Windows Resilient File System (ReFS) Information Disclosure VulnerabilityCVE-2024-435017.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2024-435027.1Windows Kernel Elevation of Privilege VulnerabilityCVE-2024-435037.8Microsoft SharePoint Elevation of Privilege Vulnerability