Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-0465

Опубликовано: 12 янв. 2024
Источник: nvd
CVSS3: 3.5
CVSS3: 5.3
CVSS2: 2.7
EPSS Низкий

Описание

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument download_file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-250570 is the identifier assigned to this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:code-projects:employee_profile_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 29%
0.00108
Низкий

3.5 Low

CVSS3

5.3 Medium

CVSS3

2.7 Low

CVSS2

Дефекты

CWE-24

Связанные уязвимости

CVSS3: 3.5
github
около 2 лет назад

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument download_file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-250570 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 29%
0.00108
Низкий

3.5 Low

CVSS3

5.3 Medium

CVSS3

2.7 Low

CVSS2

Дефекты

CWE-24