CVE-2024-3129 – SourceCodester Image Accordion Gallery App add-image.php unrestricted upload

https://notcve.org/view.php?id=CVE-2024-3129

A vulnerability was found in SourceCodester Image Accordion Gallery App 1.0. It has been classified as critical. This affects an unknown part of the file /endpoint/add-image.php. The manipulation of the argument image_name leads to unrestricted upload. It is possible to initiate the attack remotely. • https://github.com/Sospiro014/zday1/blob/main/Image_Accordion_Gallery.md https://vuldb.com/?ctiid.258873 https://vuldb.com/?id.258873 https://vuldb.com/?submit.308188 • CWE-434: Unrestricted Upload of File with Dangerous Type •