Lucene search

[email protected]CVE-2024-0472

HistoryJan 12, 2024 - 10:15 p.m.

CVE-2024-0472

2024-01-1222:15:45

CWE-200

[email protected]

web.nvd.nist.gov

cve-2024-0472

code-projects

dormitory management system 1.0

file modifyuser.php

information disclosure

vdb-250577

2.7 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.3%

JSON

A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file modifyuser.php. The manipulation of the argument mname leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier VDB-250577 was assigned to this vulnerability.

Affected configurations

Vulners

NVD

Node

code-projectsdormitory_management_systemMatch1.0

VendorProductVersionCPE
code\-projectsdormitory_management_system1.0cpe:2.3:a:code\-projects:dormitory_management_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
code\-projects	dormitory_management_system	1.0	cpe:2.3:a:code\-projects:dormitory_management_system:1.0:::::::*

CNA Affected

[
  {
    "vendor": "code-projects",
    "product": "Dormitory Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

References

github.com/yingqian1984/FirePunch/blob/main/7-Dormitory%20Management%20System%20has%20Database%20information%20leakage%20modifyuser.php.pdf

vuldb.com/?ctiid.250577

vuldb.com/?id.250577

2.7 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.3%

JSON

Related for CVE-2024-0472

prion1 cvelist1 nvd1