CVE-2024-7917

NVD Published Date: August 18, 2024 at 11:15 PM
NVD Last Modified: August 21, 2024 at 12:30 PM
Download Patch
Vulnerability ID
CVE-2024-7917
Severity
HIGH
Severity Score
7.2
Summary
A vulnerability, which was classified as critical, has been found in DouPHP 1.7 Release 20220822. Affected by this issue is some unknown functionality of the file /admin/system.php of the component Favicon Handler. The manipulation of the argument site_favicon leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Mitigation and Patches
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE ID
CWE-434

Recent Publish

CVE-2024-7920

CVE-2024-7919

CVE-2024-44067

CVE-2024-44070

CVE-2024-44069

CVE-2024-7921

See SecOps Solution
in action

Schedule Demo