CVE-2024-7277

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273146 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

VendorProductVersions
itsourcecodeAlton Management System1.0
itsourcecodealton_management_system1.0

References

Timeline

Published
Jul 31, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-72787.2A vulnerability was found in itsourcecode Alton Management System 1.0. It has been classified as critical. This affects an unknown part of tCVE-2024-72799.8A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been declared as critical. This vulnerability affeCVE-2024-72809.8A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been rated as critical. This issue affects some unCVE-2024-72819.8A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown functiCVE-2024-72829.8A vulnerability classified as critical was found in SourceCodester Lot Reservation Management System 1.0. Affected by this vulnerability is CVE-2024-72838.8A vulnerability, which was classified as critical, has been found in SourceCodester Lot Reservation Management System 1.0. Affected by this CVE-2024-72845.4A vulnerability, which was classified as problematic, was found in SourceCodester Lot Reservation Management System 1.0. This affects an unkCVE-2024-72855.4A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as problematic. This vulnerabiliCVE-2024-72869.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This issue affects some CVE-2024-72878.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as critical. Affected is an CVE-2024-72888.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been declared as critical. Affected by this CVE-2024-72898.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been rated as critical. Affected by this iss
CVE-2024-7277: High severity, CVSS 7.2 | Vulnix