CVE-2024-4820: Medium Upload Flaw in SourceCodester Laptop Store
CVE-2024-4820 is a medium (6.3) unrestricted upload in SourceCodester Online Computer and Laptop Store 1.0 SystemSettings.php. No fix is listed.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2024-4820 is a medium (6.3) unrestricted upload in SourceCodester Online Computer and Laptop Store 1.0 SystemSettings.php. No fix is listed.
CVE-2024-4819 is a medium (4.3) improper authorization flaw in Campcodes Online Laundry Management System 1.0 admin_class.php. No fix is listed.
CVE-2024-4817 is a medium (6.3) insecure direct object reference in Campcodes Online Laundry Management System 1.0 manage_user.php. No fix is listed.
CVE-2024-4813 is a medium (6.3) OS command injection in Ruijie RG-UAC up to 20240506, with no vendor reply. Restrict the management interface now.
CVE-2024-4809 is a medium (6.3) unrestricted upload in SourceCodester Open Source Clinic Management System 1.0 setting.php. No fix is listed; isolate it.
CVE-2024-4799 is a medium (6.3) SQL injection in Kashipara College Management System 1.0 view_each_faculty.php. No fix is listed, so isolate and replace it.
CVE-2024-4798 is a medium (6.3) SQL injection in SourceCodester Online Computer and Laptop Store 1.0 manage_brand.php. No fix is listed, so isolate it.
CVE-2024-4792 is a medium (6.3) SQL injection in Campcodes Online Laundry Management System 1.0 admin_class.php. No fix is listed, so isolate and replace it.
CVE-2024-4790 is a medium (4.3) path traversal in DedeCMS 5.7.114 that reads arbitrary files. The vendor did not respond, so restrict access and watch for a fix.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.