A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file dasboard_teacher.php of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249443.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.249443 | Third Party Advisory |
| https://vuldb.com/?ctiid.249443 | Third Party Advisory |
| https://mega.nz/file/PBd13AoR#G3fYWB82wGCa7sD22JP3_twtbw3B0qSJ-4eMMrYR5cE | Exploit Third Party Advisory |
Configurations
History
08 Jan 2024, 18:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?ctiid.249443 - Third Party Advisory | |
| References | () https://mega.nz/file/PBd13AoR#G3fYWB82wGCa7sD22JP3_twtbw3B0qSJ-4eMMrYR5cE - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.249443 - Third Party Advisory | |
| CWE | CWE-434 | |
| CPE | cpe:2.3:a:nia:rrj_nueva_ecija_engineer_online_portal:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Nia rrj Nueva Ecija Engineer Online Portal
Nia |
02 Jan 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-02 01:15
Updated : 2024-05-17 02:34
NVD link : CVE-2024-0185
Mitre link : CVE-2024-0185
JSON object : View
Products Affected
nia
- rrj_nueva_ecija_engineer_online_portal
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type