CVE-2024-4904

A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264437 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-434

• https://github.com/Hefei-Coffee/cve/blob/main/upload.md
• https://vuldb.com/?ctiid.264437
• https://vuldb.com/?id.264437
• https://vuldb.com/?submit.330636
• https://github.com/Hefei-Coffee/cve/blob/main/upload.md
• https://vuldb.com/?ctiid.264437
• https://vuldb.com/?id.264437
• https://vuldb.com/?submit.330636

Published

May 15, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-49031Microsoft Office Graphics Remote Code Execution Vulnerabilit…7.8
• CVE-2024-49032Microsoft Office Graphics Remote Code Execution Vulnerabilit…7.8
• CVE-2024-49033Microsoft Word Security Feature Bypass Vulnerability7.5
• CVE-2024-49035An improper access control vulnerability in Partner.Microsof…9.8
• CVE-2024-49038Improper neutralization of input during web page generation …9.6
• CVE-2024-49039Windows Task Scheduler Elevation of Privilege Vulnerability8.8
• CVE-2024-49040Microsoft Exchange Server Spoofing Vulnerability7.5
• CVE-2024-49041Microsoft Edge (Chromium-based) Spoofing Vulnerability4.3
• CVE-2024-49042Azure Database for PostgreSQL Flexible Server Extension Elev…7.2
• CVE-2024-49043Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Exe…7.8
• CVE-2024-49044Visual Studio Elevation of Privilege Vulnerability6.7
• CVE-2024-49046Windows Win32 Kernel Subsystem Elevation of Privilege Vulner…7.8