A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file downloadable.php of the component Add Downloadable. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249505 was assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.249505 | Third Party Advisory |
| https://vuldb.com/?ctiid.249505 | Third Party Advisory |
| https://mega.nz/file/2RNnjDTR#nDT4E74juKhdO3eWTv8VjDD2dDcNUzyAk2UR3psM8rM | Exploit Third Party Advisory |
Configurations
History
08 Jan 2024, 13:54
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nia rrj Nueva Ecija Engineer Online Portal
Nia |
|
| CPE | cpe:2.3:a:nia:rrj_nueva_ecija_engineer_online_portal:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| References | () https://mega.nz/file/2RNnjDTR#nDT4E74juKhdO3eWTv8VjDD2dDcNUzyAk2UR3psM8rM - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.249505 - Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.249505 - Third Party Advisory |
02 Jan 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-02 20:15
Updated : 2024-05-17 02:34
NVD link : CVE-2024-0192
Mitre link : CVE-2024-0192
JSON object : View
Products Affected
nia
- rrj_nueva_ecija_engineer_online_portal
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type