CVE-2024-3436 | SourceCodester Prison Management System 1.0 Avatar /Admin/edit-photo.php avatar unrestricted upload

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Admin/edit-photo.php of the component Avatar Handler. The manipulation of the argument avatar leads to unrestricted upload.

This vulnerability was named CVE-2024-3436. The attack can be initiated remotely. Furthermore, there is an exploit available.