CVE-2024-6083
Phpvibe
CVE-2024-6083 allows for unrestricted file upload in PHPVibe 11.0.46, posing a critical security risk. The vulnerability resides within the /app/uploading/upload-mp3.php file's Media Upload Page component. By manipulating the 'file' argument, attackers can upload malicious files remotely. Although the CVSS score is high at 9.8, the SOCRadar Vulnerability Risk Score (SVRS) is 30, suggesting a lower immediate threat level despite the public availability of the exploit. This discrepancy may be due to limited exploitation in the dark web or social media chatter. However, the potential for exploitation remains significant, particularly given the lack of vendor response.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.