The vulnerability CVE-2024-49611 affects the paxmanpwnz Product Website Showcase product, allowing unauthenticated attackers to upload files of dangerous types without restriction. This unrestricted file upload can be exploited to place a web shell on the server, potentially leading to full system compromise. The affected versions include all versions up to and including 1.0. The CVSS 3.1 base score is 10.0, reflecting network attack vector, no required privileges or user interaction, and complete impact on confidentiality, integrity, and availability. No official patch or vendor advisory is currently available.

Successful exploitation allows an attacker to upload a web shell, resulting in full compromise of the web server. This includes unauthorized access, data theft or manipulation, and disruption of service. The vulnerability is critical due to its ease of exploitation and severe impact on system security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict file upload functionality, implement strict file type validation, and apply web application firewall (WAF) rules to detect and block malicious uploads. Monitor for suspicious activity related to file uploads.