{"id":"CVE-2024-48594","aliases":["EUVD-2024-43041","GHSA-v39q-v2cw-g4fp"],"status":"published","title":"File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute...","description":"File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.03369,"percentile":0.88908,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-434"],"published":"2024-10-28T00:00:00Z","modified":"2026-06-17T07:58:36Z","exploits":[{"source":"metasploit","id":"exploit/linux/http/prison_management_rce","title":"Prison Management System 1.0 Authenticated RCE via Unrestricted File Upload","type":"exploit","platform":"Linux,PHP,Unix","date":"2024-10-28","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/prison_management_rce"}],"products":[{"vendor":"fast5","product":"prison_management_system"},{"vendor":"sourcecodester","product":"prison_management_system"}],"references":[{"url":"https://github.com/Aa1b/mycve/blob/main/Readme.md","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48594"},{"url":"https://github.com/advisories/GHSA-v39q-v2cw-g4fp"}],"sources":{"cve":[{"id":"CVE-2024-48594","description":"File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component.","status":"published","published":"2024-10-28T00:00:00Z","modified":"2024-10-30T16:46:54.674Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:34:11.97482Z"}],"euvd":[{"id":"EUVD-2024-43041","description":"File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component.","status":"published","published":"2024-10-28T00:00:00Z","modified":"2024-10-30T16:46:54Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:05:14.330068Z"}],"ghsa":[{"id":"GHSA-v39q-v2cw-g4fp","title":"File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute...","description":"File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component.","status":"published","published":"2024-10-28T21:30:36Z","modified":"2024-10-30T18:30:48Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:58:39.26425Z"}],"nvd":[{"id":"CVE-2024-48594","description":"File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component.","status":"published","published":"2024-10-28T21:15:09.69Z","modified":"2026-06-17T07:58:36.83Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:10:34.877798Z"}]}}