Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hpf-pfx9-rfv9

Опубликовано: 28 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 6.3

Описание

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument page with the input trains/schedules/system_info leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument page with the input trains/schedules/system_info leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 21%
0.0007
Низкий

5.3 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-285
CWE-862

Связанные уязвимости

CVSS3: 6.3
nvd
больше 1 года назад

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument page with the input trains/schedules/system_info leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 21%
0.0007
Низкий

5.3 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-285
CWE-862