Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7g8v-p8gp-3mff

Опубликовано: 02 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function save_users of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-258914 is the identifier assigned to this vulnerability.

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function save_users of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-258914 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 23%
0.00076
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-285
CWE-639

Связанные уязвимости

CVSS3: 5.4
nvd
почти 2 года назад

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function save_users of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-258914 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 23%
0.00076
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-285
CWE-639