CVE-2024-5047

Summary

CVE-2024-5047 is a critical vulnerability affecting the SourceCodester Student Management System 1.0. An unknown function in the file /student/controller.php contains a flaw that allows for unrestricted uploads when the argument photo is manipulated. This vulnerability can be exploited remotely, and the exploit has already been disclosed to the public. As a result, it is recommended that users of this system apply patches or updates as soon as possible to mitigate the risk. (VDB-264744)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.