CVE-2024-6647

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Croogo up to 4.0.7. This affects an unknown part of the file admin/settings/settings/prefix/Theme of the component Setting Handler. The manipulation of the argument Content-Type leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271053 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-434

• https://github.com/DeepMountains/Mirage/blob/main/CVE-1.md
• https://vuldb.com/?ctiid.271053
• https://vuldb.com/?id.271053
• https://vuldb.com/?submit.372009
• https://github.com/DeepMountains/Mirage/blob/main/CVE-1.md
• https://vuldb.com/?ctiid.271053
• https://vuldb.com/?id.271053
• https://vuldb.com/?submit.372009

Published

Jul 10, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6641The WP Hardening – Fix Your WordPress Security plugin for Wo…5.3
• CVE-2024-6642Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-6643Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-6644A vulnerability was found in zmops ArgusDBM up to 0.1.0. It …6.3
• CVE-2024-6645A vulnerability was found in WuKongOpenSource Wukong_nocode …6.3
• CVE-2024-6646A vulnerability was found in Netgear WN604 up to 20240710. I…6.9
• CVE-2024-6648Absolute Path Traversal vulnerability in AP Page Builder ver…7.5
• CVE-2024-6649A vulnerability has been found in SourceCodester Employee an…6.5
• CVE-2024-6650A vulnerability was found in SourceCodester Employee and Vis…4.8
• CVE-2024-6651The WordPress File Upload WordPress plugin before 4.24.8 doe…6.1
• CVE-2024-6652A vulnerability was found in itsourcecode Gym Management Sys…8.8
• CVE-2024-6653A vulnerability was found in code-projects Simple Task List …9.8