sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2024-4927 SourceCodester Simple Online Bidding System unrestricted upload

Medium 6.9 Published Updated

Attackers can upload malicious files to the admin interface, potentially leading to remote code execution on the server.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2024-4927?

CVE-2024-4927 is a medium-severity vulnerability in SourceCodester Simple Online Bidding System, published on 16 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /simple-online-bidding-system/admin/ajax.php?action=save_product. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-264463.

Weakness: CWE-434

Which versions are affected by CVE-2024-4927?

It affects 1 product.

Products include Oretnom23 Simple Online Bidding System.

How do I fix CVE-2024-4927?

No fix has been published for CVE-2024-4927 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-4927 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-4927 exists.

Sources

Also known as GHSA-fcgh-hm5r-m53h.

Is CVE-2024-4927 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free