Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-40480
HistoryAug 09, 2024 - 12:00 a.m.

CVE-2024-40480

2024-08-0900:00:00
mitre
github.com
2
broken access control
kashipara online exam system
remote attackers

AI Score

7

Confidence

Low

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete valid user accounts via the direct URL access.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:kashipara:online_exam_system:1.0:*:*:*:*:*:*:*"
    ],
    "vendor": "kashipara",
    "product": "online_exam_system",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

AI Score

7

Confidence

Low

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-40480