{"vulnerability": "cve-2024-12956", "sightings": [{"uuid": "1dd8a139-e3ab-4468-9507-d91538f8aebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12956", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719746074741440", "content": "", "creation_timestamp": "2024-12-26T15:06:58.102533Z"}, {"uuid": "834c2023-122f-4a55-92ad-3b72d84714b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12956", "type": "seen", "source": "https://t.me/cvedetector/13682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12956 - \"Unrestricted File Upload in 1000 Projects Portfolio Management System MCA\"\", \n  \"Content\": \"CVE ID : CVE-2024-12956 \nPublished : Dec. 26, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /add_achievement_details.php. The manipulation of the argument ach_certy leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T16:34:21.000000Z"}]}