CVE-2024-6083

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-6083

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6083.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-6083

Published

2024-06-17T23:31:03Z

Modified

2026-08-27T03:57:02Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

PHPVibe Media Upload Page upload-mp3.php unrestricted upload

Details

A vulnerability, which was classified as critical, was found in PHPVibe 11.0.46. Affected is an unknown function of the file /app/uploading/upload-mp3.php of the component Media Upload Page. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268824. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-434"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6083.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "11.0.46"
                },
                {
                    "last_affected": "11.0.46"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/PHPVibe/PHPVibe-Video-Sharing-CMS

Affected ranges

Type

GIT

Repo

https://github.com/PHPVibe/PHPVibe-Video-Sharing-CMS

Events

Introduced

b3d38f4849305f39085852cf207f58c27eef225b

Last Affected

b3d38f4849305f39085852cf207f58c27eef225b

Database specific

Show details

{
    "cpe": "cpe:2.3:a:phpvibe:phpvibe:11.0.46:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "11.0.46"
        },
        {
            "last_affected": "11.0.46"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

11.*

11.0.46

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6083.json"