CVE-2024-7192

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/student.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272613 was assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Jul 29, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-71937.8A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library t CVE-2024-71948.8A vulnerability was found in itsourcecode Society Management System 1.0 and classified as critical. This issue affects some unknown processi CVE-2024-71959.8A vulnerability was found in itsourcecode Society Management System 1.0. It has been classified as critical. Affected is an unknown function CVE-2024-71969.8A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been declared as critical. Affected by this vuln CVE-2024-71978.8A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue i CVE-2024-71988.8A vulnerability classified as critical has been found in SourceCodester Complaints Report Management System 1.0. This affects an unknown par CVE-2024-71998.8A vulnerability classified as critical was found in SourceCodester Complaints Report Management System 1.0. This vulnerability affects unkno CVE-2024-72005.4A vulnerability, which was classified as problematic, has been found in SourceCodester Complaints Report Management System 1.0. This issue a CVE-2024-72019.8The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated re CVE-2024-72029.8The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated re CVE-2024-72037.2A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series fir CVE-2024-72046.1Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Once