Description

Cross-Site Request Forgery (CSRF) vulnerability in lukashuser EKC Tournament Manager ekc-tournament-manager allows Upload a Web Shell to a Web Server.This issue affects EKC Tournament Manager: from n/a through <= 2.2.1.

INFO

Published Date :

2024-10-31T10:01:19.117Z

Last Modified :

2026-04-01T15:36:35.836Z

Source :

Patchstack
AFFECTED PRODUCTS

The following products are affected by CVE-2024-49674 vulnerability.

Vendors Products
Lukas Huser
  • Ekc Tournament Manager
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-49674.

URL Resource
https://patchstack.com/database/Wordpress/Plugin/ekc-tournament-manager/vulnerability/wordpress-ekc-tournament-manager-plugin-2-2-1-csrf-to-arbitrary-file-upload-vulnerability?_s_id=cve cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System