CVE-2024-0348: fallo de gravedad media en SourceCodester Engineers Online Portal
SourceCodester Engineers Online Portal File Upload resource consumption
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.3epss 1.1%
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the component File Upload Handler. The manipulation leads to resource consumption. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250116.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Productos afectados
SourceCodester · Engineers Online PortalCVEs relacionadas — SourceCodester Engineers Online Portal
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-5284MEDIUMSourceCodester Engineers Online Portal upload_save_student.php unrestricted uploadEPSS 1.0%CVE-2023-5277MEDIUMSourceCodester Engineers Online Portal student_avatar.php unrestricted uploadEPSS 1.0%CVE-2024-0347LOWSourceCodester Engineers Online Portal signup_teacher.php weak passwordEPSS 0.9%CVE-2023-5278MEDIUMSourceCodester Engineers Online Portal login.php sql injectionEPSS 0.8%CVE-2023-5282MEDIUMSourceCodester Engineers Online Portal seed_message_student.php sql injectionEPSS 0.8%CVE-2023-5281MEDIUMSourceCodester Engineers Online Portal remove_inbox_message.php sql injectionEPSS 0.8%