Lucene search

VulDBCVE-2024-0260

HistoryJan 07, 2024 - 12:15 a.m.

CVE-2024-0260

2024-01-0700:15:42

CWE-613

VulDB

web.nvd.nist.gov

security

vulnerability

sourcecodester engineers

remote attack

session expiration

cve-2024-0260

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

21.9%

JSON

A vulnerability, which was classified as problematic, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file change_password_teacher.php of the component Password Change. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249816.

Affected configurations

Nvd

Vulners

Node

engineers_online_portal_projectengineers_online_portalMatch1.0

VendorProductVersionCPE
engineers_online_portal_projectengineers_online_portal1.0cpe:2.3:a:engineers_online_portal_project:engineers_online_portal:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
engineers_online_portal_project	engineers_online_portal	1.0	cpe:2.3:a:engineers_online_portal_project:engineers_online_portal:1.0:::::::*

CNA Affected

[
  {
    "vendor": "SourceCodester",
    "product": "Engineers Online Portal",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Password Change"
    ]
  }
]

References

mega.nz/file/yEsSwK6D#--ygVt0NtzhZdqVxvjaPLCYfnIeBSyf76KaRozOxfVo

vuldb.com/?ctiid.249816

vuldb.com/?id.249816

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

21.9%

JSON

Related for CVE-2024-0260