CVE-2023-37629
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Online Piggery Management System version 1.0 is vulnerable to File Upload. An unauthenticated user can upload a PHP file by sending a POST request to 'add-pig.php.'
Risk Assessment
An attacker could exploit this vulnerability to upload malicious code, potentially leading to system compromise. This poses a significant threat to the security of the organization's data and infrastructure.
Recommendation
It is recommended to implement file upload restrictions and user authentication before allowing any file uploads. A security audit of the application should also be conducted.
Original NVD description (English source)
Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php."