CVE-2024-26492

Affected software: Online Diagnostic Lab Management System version 1.0. Vulnerability: remote attacker can gain control of a 'Staff' user account by sending a crafted POST request using the parameters id, email, password, and cpass. This is described consistently across CVE records from NVD, Red ...