Best Courier Management System CVE-2023-46004

HIGH

Unrestricted Upload of File with Dangerous Type (CWE-434)

2023-10-18 cve@mitre.org

File Upload Best Courier Management System

7.2

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Oct 18, 2023 - 13:15 nvd

HIGH 7.2

DescriptionNVD

Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update_user function.

AnalysisAI

Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update_user function. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Unrestricted File Upload (CWE-434), which allows attackers to upload malicious files that can be executed on the server. Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update_user function. Affected products include: Mayurik Best Courier Management System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate file types server-side, store uploads outside webroot, use random filenames, scan for malware.

More in Best Courier Management System

View all

CVE-2024-48581 CRITICAL Act Now POC

File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary c

CVE-2024-48580 CRITICAL Act Now POC

SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary

CVE-2023-6898 CRITICAL Act Now POC

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Rated critic

CVE-2023-46980 CRITICAL Act Now POC

An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privile

CVE-2023-46007 CRITICAL Act Now POC

Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_staff.php

CVE-2023-46006 CRITICAL Act Now POC

Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_user.php.

CVE-2023-46005 CRITICAL Act Now POC

Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_branch.ph

CVE-2023-5272 HIGH This Week POC

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Rated high s

CVE-2023-5271 HIGH This Week POC

A vulnerability was found in SourceCodester Best Courier Management System 1.0. Rated high severity (CVSS 8.8), this vul

CVE-2023-5270 HIGH This Week POC

A vulnerability was found in SourceCodester Best Courier Management System 1.0. Rated high severity (CVSS 8.8), this vul

CVE-2023-6301 MEDIUM This Month POC

A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Rated

CVE-2023-6300 MEDIUM This Month POC

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Ra

Same weakness CWE-434 – Unrestricted Upload of File with Dangerous Type

View all

CVE-2016-3088 CRITICAL POC

CVE-2021-31207 MEDIUM POC

CVE-2017-12617 HIGH POC

CVE-2017-11357 CRITICAL POC

CVE-2017-12615 HIGH POC

CVE-2024-5084 CRITICAL POC

CVE-2020-36847 CRITICAL POC

CVE-2017-6090 HIGH POC

Same technique File Upload

View all

CVE-2016-3088 CRITICAL POC

CVE-2017-12617 HIGH POC

CVE-2017-11357 CRITICAL POC

CVE-2017-12615 HIGH POC

CVE-2024-5084 CRITICAL POC

CVE-2016-6600 CRITICAL POC

CVE-2017-6090 HIGH POC

CVE-2015-8249 CRITICAL POC

Share

CVE-2023-46004 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy