CVE-2024-10353

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /admin-dashboard. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This affects a different product and is a different issue than CVE-2024-40480.
References
Link Resource
https://vuldb.com/?id.281700 Third Party Advisory VDB Entry
https://vuldb.com/?ctiid.281700 Permissions Required VDB Entry
https://vuldb.com/?submit.427957 Exploit Third Party Advisory VDB Entry
https://drive.google.com/file/d/1hEXfbOOkWdYzaSI6ORQvPGBtn09R12Ui/view?usp=drive_link Permissions Required
https://www.sourcecodester.com/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:oretnom23:online_exam_system:1.0:*:*:*:*:*:*:*

History

30 Oct 2024, 16:21

Type Values Removed Values Added
CWE CWE-284 NVD-CWE-noinfo
CPE cpe:2.3:a:oretnom23:online_exam_system:1.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.2
First Time Oretnom23 online Exam System
Oretnom23
References () https://vuldb.com/?id.281700 - () https://vuldb.com/?id.281700 - Third Party Advisory, VDB Entry
References () https://drive.google.com/file/d/1hEXfbOOkWdYzaSI6ORQvPGBtn09R12Ui/view?usp=drive_link - () https://drive.google.com/file/d/1hEXfbOOkWdYzaSI6ORQvPGBtn09R12Ui/view?usp=drive_link - Permissions Required
References () https://vuldb.com/?submit.427957 - () https://vuldb.com/?submit.427957 - Exploit, Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.281700 - () https://vuldb.com/?ctiid.281700 - Permissions Required, VDB Entry
References () https://www.sourcecodester.com/ - () https://www.sourcecodester.com/ - Product

25 Oct 2024, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-25 00:15

Updated : 2024-10-30 16:21


NVD link : CVE-2024-10353

Mitre link : CVE-2024-10353


JSON object : View

Products Affected

oretnom23

  • online_exam_system