Lucene search

VulDBCVE-2024-7813

HistoryAug 15, 2024 - 3:15 a.m.

CVE-2024-7813

2024-08-1503:15:06

CWE-522

VulDB

web.nvd.nist.gov

vulnerability

sourcecodester

prison management system

profile image handler

insufficiently protected credentials

remote attack

exploit disclosed

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS4

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

5.4

Confidence

High

EPSS

0.003

Percentile

69.6%

JSON

A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. This issue affects some unknown processing of the file /uploadImage/Profile/ of the component Profile Image Handler. The manipulation leads to insufficiently protected credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

prison_management_system_projectprison_management_systemMatch1.0

VendorProductVersionCPE
prison_management_system_projectprison_management_system1.0cpe:2.3:a:prison_management_system_project:prison_management_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
prison_management_system_project	prison_management_system	1.0	cpe:2.3:a:prison_management_system_project:prison_management_system:1.0:::::::*

CNA Affected

[
  {
    "vendor": "SourceCodester",
    "product": "Prison Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Profile Image Handler"
    ]
  }
]

References

github.com/CYB84/CVE_Writeup/blob/main/Directory%20Listing.md

vuldb.com/?ctiid.274709

vuldb.com/?id.274709

vuldb.com/?submit.391358

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS4

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

5.4

Confidence

High

EPSS

0.003

Percentile

69.6%

JSON

Related for CVE-2024-7813