CVE-2024-11000
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Nov 8, 2024
Updated: Nov 13, 2024
CWE ID 434
CWE ID 284
Summary
CVE-2024-11000: A vulnerability has been discovered in the CodeAstro Real Estate Management System 1.0. This issue lies within the unknown functionality of the About Us Page's /aboutedit.php file. Manipulating the 'aimage' argument results in an unrestricted file upload. The attack can be executed remotely, and the exploit is now publicly disclosed, increasing the risk of potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.