CVE-2024-10766

Summary

CVE-2024-10766 is a critical vulnerability identified in the Codezips Free Exam Hall Seating Management System 1.0. The issue arises from a flaw in the processing of the /pages/save_user.php file, which allows for unrestricted uploads when an attacker manipulates the argument image. This vulnerability can be exploited remotely, and the initial researcher disclosure has made the exploit publicly available. The specific vulnerability class and file names mentioned in the disclosure are unclear.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.