CVE-2024-2268

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been classified as critical. Affected is an unknown function of the file /product_update.php?update=1. The manipulation of the argument update_image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-256038 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-434

• https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/File%20Upload/Arbitrary%20FIle%20Upload%20in%20product_update.php%20.mdBroken Link
• https://vuldb.com/?ctiid.256038Permissions Required
• https://vuldb.com/?id.256038Third Party Advisory
• https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/File%20Upload/Arbitrary%20FIle%20Upload%20in%20product_update.php%20.mdBroken Link
• https://vuldb.com/?ctiid.256038Permissions Required
• https://vuldb.com/?id.256038Third Party Advisory

Published

Mar 7, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2266A vulnerability has been found in keerti1924 Secret-Coder-PH…6.1
• CVE-2024-22660TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vu…9.8
• CVE-2024-22662TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow v…9.8
• CVE-2024-22663TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection…9.8
• CVE-2024-22667Vim before 9.0.2142 has a stack-based buffer overflow becaus…7.8
• CVE-2024-2267A vulnerability was found in keerti1924 Online-Book-Store-We…7.5
• CVE-2024-22682Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-2269A vulnerability was found in keerti1924 Online-Book-Store-We…9.8
• CVE-2024-22699FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vul…8.8
• CVE-2024-2270A vulnerability was found in keerti1924 Online-Book-Store-We…6.1
• CVE-2024-22705An issue was discovered in ksmbd in the Linux kernel before …7.8
• CVE-2024-2271A vulnerability classified as critical has been found in kee…9.8