Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-0307

Опубликовано: 08 янв. 2024
Источник: nvd
CVSS3: 7.3
CVSS3: 7.5
CVSS2: 7.5
EPSS Низкий

Описание

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login_process.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249874 is the identifier assigned to this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:lopalopa:dynamic_lab_management_system:*:*:*:*:*:*:*:*
Версия до 1.0 (включая)

EPSS

Процентиль: 26%
0.00093
Низкий

7.3 High

CVSS3

7.5 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.3
github
около 2 лет назад

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login_process.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249874 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 26%
0.00093
Низкий

7.3 High

CVSS3

7.5 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89