CVE-2023-37629
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Online Piggery Management System version 1.0 is vulnerable to File Upload. An unauthenticated user can upload a PHP file by sending a POST request to 'add-pig.php.'
Risk Assessment
An attacker could exploit this vulnerability to upload malicious code, potentially leading to system compromise. This poses a significant threat to the security of the organization's data and infrastructure.
Recommendation
It is recommended to implement file upload restrictions and user authentication before allowing any file uploads. A security audit of the application should also be conducted.
Other vulnerabilities in Online Piggery Management System 1.0
See all- CVE-2023-37628Critical
Online Piggery Management System version 1.0 is vulnerable to SQL Injection, which may lead to unauthorized access to the database.
- CVE-2023-37630Medium
Online Piggery Management System version 1.0 is vulnerable to Cross Site Scripting (XSS). An unauthenticated user can POST JavaScript code to 'manage-breed.php', resulting in Persistent XSS.
Original NVD description (English source)
Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php."