Lucene search

[email protected]CVE-2024-4818

HistoryMay 14, 2024 - 3:45 p.m.

CVE-2024-4818

2024-05-1415:45:10

CWE-73

[email protected]

web.nvd.nist.gov

vulnerability

campcodes online

laundry management system

remote file inclusion

/index.php

exploit disclosed

cve-2024-4818

vdb-263939

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6.9 Medium

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263939.

Affected configurations

Vulners

Node

campcodessupplier_management_systemMatch1.0

VendorProductVersionCPE
campcodessupplier_management_system1.0cpe:2.3:a:campcodes:supplier_management_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
campcodes	supplier_management_system	1.0	cpe:2.3:a:campcodes:supplier_management_system:1.0:::::::*

CNA Affected

[
  {
    "vendor": "Campcodes",
    "product": "Online Laundry Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

References

github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/LFI.md

vuldb.com/?ctiid.263939

vuldb.com/?id.263939

vuldb.com/?submit.333057

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6.9 Medium

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

Related for CVE-2024-4818

vulnrichment1 cvelist1 nvd1