CVE-2024-0348: medium-severity vulnerability in SourceCodester Engineers Online Portal
SourceCodester Engineers Online Portal File Upload resource consumption
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 1.1%
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the component File Upload Handler. The manipulation leads to resource consumption. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250116.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected products
SourceCodester · Engineers Online PortalRelated CVEs — SourceCodester Engineers Online Portal
In the same product, most dangerous first.
CVE-2023-5284MEDIUMSourceCodester Engineers Online Portal upload_save_student.php unrestricted uploadEPSS 1.0%CVE-2023-5277MEDIUMSourceCodester Engineers Online Portal student_avatar.php unrestricted uploadEPSS 1.0%CVE-2024-0347LOWSourceCodester Engineers Online Portal signup_teacher.php weak passwordEPSS 0.9%CVE-2023-5278MEDIUMSourceCodester Engineers Online Portal login.php sql injectionEPSS 0.8%CVE-2023-5282MEDIUMSourceCodester Engineers Online Portal seed_message_student.php sql injectionEPSS 0.8%CVE-2023-5281MEDIUMSourceCodester Engineers Online Portal remove_inbox_message.php sql injectionEPSS 0.8%