CVE-2024-11661

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Nov 25, 2024
Updated: Dec 4, 2024
CWE ID 434
CWE ID 284

Summary

CVE-2024-11661 is a newly identified vulnerability affecting the Codezips Free Exam Hall Seating Management System version 1.0. This issue lies within the Profile Image Handler component and specifically the file profile.php. The flaw allows for unrestricted image uploads, which can be exploited remotely. The vulnerability's precise nature is yet to be definitively classified by the researcher.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share