Security Advisory

CVE-2024-40071

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-16 00:00:00
Last updated 2025-04-22 14:39:04
Assigner mitre
State PUBLISHED

Description

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/SystemSettings.php?f=update_settings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.