Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-0414

Опубликовано: 11 янв. 2024
Источник: nvd
CVSS3: 5.3
CVSS3: 9.8
CVSS2: 5
EPSS Низкий

Описание

A vulnerability classified as problematic has been found in DeShang DSCMS up to 3.1.2/7.1. Affected is an unknown function of the file public/install.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250434 is the identifier assigned to this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:csdeshang:dscms:*:*:*:*:*:*:*:*
Версия от 3.1.0 (включая) до 3.1.2 (включая)
cpe:2.3:a:csdeshang:dscms:7.0:*:*:*:*:*:*:*
cpe:2.3:a:csdeshang:dscms:7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 51%
0.00278
Низкий

5.3 Medium

CVSS3

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

github логотип

GHSA-2623-7ghf-34hg

CVSS3: 5.3
github
почти 2 года назад

A vulnerability classified as problematic has been found in DeShang DSCMS up to 3.1.2/7.1. Affected is an unknown function of the file public/install.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250434 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 51%
0.00278
Низкий

5.3 Medium

CVSS3

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284