CVE-2024-7496

A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273622 is the identifier assigned to this vulnerability.
References
Link Resource
https://vuldb.com/?id.273622 Permissions Required Third Party Advisory
https://vuldb.com/?ctiid.273622 Permissions Required Third Party Advisory
https://vuldb.com/?submit.385892 Third Party Advisory
https://github.com/DeepMountains/zzz/blob/main/CVE1-1.md Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:angeljudesuarez:airline_reservation_system:1.0:*:*:*:*:*:*:*

History

19 Aug 2024, 16:48

Type Values Removed Values Added
CWE CWE-73 NVD-CWE-Other
First Time Angeljudesuarez airline Reservation System
Angeljudesuarez
CPE cpe:2.3:a:angeljudesuarez:airline_reservation_system:1.0:*:*:*:*:*:*:*
References () https://vuldb.com/?id.273622 - () https://vuldb.com/?id.273622 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?submit.385892 - () https://vuldb.com/?submit.385892 - Third Party Advisory
References () https://vuldb.com/?ctiid.273622 - () https://vuldb.com/?ctiid.273622 - Permissions Required, Third Party Advisory
References () https://github.com/DeepMountains/zzz/blob/main/CVE1-1.md - () https://github.com/DeepMountains/zzz/blob/main/CVE1-1.md - Exploit
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8

06 Aug 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-06 02:15

Updated : 2024-08-19 16:48


NVD link : CVE-2024-7496

Mitre link : CVE-2024-7496


JSON object : View

Products Affected

angeljudesuarez

  • airline_reservation_system