Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-43740

Online Book Store Project v1.0 - Insecure File Upload

Description

Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of admin_edit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Online Book Store Project Online Book Store Project

Default version status: unaffected

  • 1.0affected

References