CVE-2024-12956 – “Unrestricted File Upload in 1000 Projects Portfolio Management System MCA”

CVE ID : CVE-2024-12956

Published : Dec. 26, 2024, 3:15 p.m. | 1 hour, 1 minute ago

Description : A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /add_achievement_details.php. The manipulation of the argument ach_certy leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity: 6.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2024-12956 – “Unrestricted File Upload in 1000 Projects Portfolio Management System MCA”