Volerion logoVolerion
Volerion logoVolerion

Sourcecodester Online ID Generator System Arbitrary File Upload Vulnerability Allowing Code Execution

Vulnerability

An arbitrary file upload vulnerability has been identified in Sourcecodester Online ID Generator System version 1.0. The issue arises in the SystemSettings.php file within the id_generator/classes directory, specifically through the update_settings function. This vulnerability allows attackers to upload crafted PHP files that can execute arbitrary code on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the server where the application is hosted.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
7.7
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.