CVE-2024-3521

A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259892. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-434

• https://github.com/garboa/cve_3/blob/main/Upload2.md
• https://vuldb.com/?ctiid.259892
• https://vuldb.com/?id.259892
• https://vuldb.com/?submit.308509
• https://github.com/garboa/cve_3/blob/main/Upload2.md
• https://vuldb.com/?ctiid.259892
• https://vuldb.com/?id.259892
• https://vuldb.com/?submit.308509

Published

Apr 9, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35204Veritas System Recovery before 23.3_Hotfix has incorrect per…8.4
• CVE-2024-35205The WPS Office (aka cn.wps.moffice_eng) application before 1…7.8
• CVE-2024-35206A vulnerability has been identified in SINEC Traffic Analyze…8.5
• CVE-2024-35207A vulnerability has been identified in SINEC Traffic Analyze…7.8
• CVE-2024-35208A vulnerability has been identified in SINEC Traffic Analyze…5.5
• CVE-2024-35209A vulnerability has been identified in SINEC Traffic Analyze…6.9
• CVE-2024-35210A vulnerability has been identified in SINEC Traffic Analyze…5.1
• CVE-2024-35211A vulnerability has been identified in SINEC Traffic Analyze…6.8
• CVE-2024-35212A vulnerability has been identified in SINEC Traffic Analyze…6.9
• CVE-2024-35213An improper input validation vulnerability in the SGI Image …9
• CVE-2024-35214A tampering vulnerability in the CylanceOPTICS Windows Insta…7.1
• CVE-2024-35215NULL pointer dereference in IP socket options processing of …6.2