CVE-2024-4500

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Employee/edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263104.

• CWE-434

• https://github.com/yylmm/CVE/blob/main/Prison%20Management%20System/file_upload.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.263104Permissions Required, VDB Entry
• https://vuldb.com/?id.263104Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.329639Third Party Advisory, VDB Entry
• https://github.com/yylmm/CVE/blob/main/Prison%20Management%20System/file_upload.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.263104Permissions Required, VDB Entry
• https://vuldb.com/?id.263104Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.329639Third Party Advisory, VDB Entry

Published

May 5, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-44994In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-44995In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-44996In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-44997In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-44998In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-44999In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-45000In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45001In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45002In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45003In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2024-45004In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45005In the Linux kernel, the following vulnerability has been re…5.5