Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-7226

Опубликовано: 30 июл. 2024
Источник: nvd
CVSS3: 4.3
CVSS3: 8.8
CVSS2: 5
EPSS Низкий

Описание

A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=save_user of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-272806 is the identifier assigned to this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:oretnom23:medicine_tracker_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%
0.00128
Низкий

4.3 Medium

CVSS3

8.8 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
github
больше 1 года назад

A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=save_user of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-272806 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 33%
0.00128
Низкий

4.3 Medium

CVSS3

8.8 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-352