CVE-2024-11054

CRITICAL 9.8CVE-2024-11054 · Published 10/11/2024 · updated 17/06/2026

In short

CVE-2024-11054 is a CRITICAL (CVSS 9.8) vulnerability affecting simple music cloud community system (oretnom23).
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 44.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simple music cloud community system oretnom23	`= 1.0`	No fix yet

Description

A vulnerability classified as critical was found in SourceCodester Simple Music Cloud Community System 1.0. This vulnerability affects unknown code of the file /music/ajax.php?action=signup. The manipulation of the argument pp leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

References

vuldb.com · Permissions Required
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
shawroot.cc/2826.html · Exploit
sourcecodester.com · Product

More vulnerabilities in simple music cloud community system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free