Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save.
References
| Link | Resource |
|---|---|
| https://github.com/Jadore147258369/php-ocls/blob/main/README.md | Exploit Third Party Advisory |
| https://github.com/Jadore147258369/php-ocls/blob/main/README.md | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 08:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Jadore147258369/php-ocls/blob/main/README.md - Exploit, Third Party Advisory |
04 Oct 2023, 15:07
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oretnom23 online Computer And Laptop Store
Oretnom23 |
|
| CPE | cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:* |
22 May 2023, 17:39
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-434 | |
| References | (MISC) https://github.com/Jadore147258369/php-ocls/blob/main/README.md - Exploit, Third Party Advisory | |
| First Time |
Online Computer And Laptop Store Project
Online Computer And Laptop Store Project online Computer And Laptop Store |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:online_computer_and_laptop_store_project:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:* |
16 May 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-16 15:15
Updated : 2025-01-23 16:15
NVD link : CVE-2023-31857
Mitre link : CVE-2023-31857
CVE.ORG link : CVE-2023-31857
JSON object : View
Products Affected
oretnom23
- online_computer_and_laptop_store
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type