A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. This issue affects some unknown processing of the file /uploadImage/Profile/ of the component Profile Image Handler. The manipulation leads to insufficiently protected credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.274709 | Third Party Advisory VDB Entry |
| https://vuldb.com/?ctiid.274709 | Permissions Required VDB Entry |
| https://vuldb.com/?submit.391358 | Third Party Advisory VDB Entry |
| https://github.com/CYB84/CVE_Writeup/blob/main/Directory%20Listing.md | Exploit |
Configurations
Configuration 1 (hide)
|
History
19 Aug 2024, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Prison Management System Project
Prison Management System Project prison Management System |
|
| CPE | cpe:2.3:a:prison_management_system_project:prison_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://vuldb.com/?submit.391358 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.274709 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.274709 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/CYB84/CVE_Writeup/blob/main/Directory%20Listing.md - Exploit |
15 Aug 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-15 03:15
Updated : 2024-08-19 18:16
NVD link : CVE-2024-7813
Mitre link : CVE-2024-7813
JSON object : View
Products Affected
prison_management_system_project
- prison_management_system
CWE
CWE-522
Insufficiently Protected Credentials