CVE-2024-7497: fallo de gravedad media en itsourcecode Airline Reservation System
itsourcecode Airline Reservation System index.php file inclusion
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 0.7%
A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273623.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
itsourcecode · Airline Reservation SystemCVEs relacionadas — itsourcecode Airline Reservation System
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-7500MEDIUMitsourcecode Airline Reservation System admin_class.php save_settings unrestricted uploadEPSS 0.7%CVE-2024-7498MEDIUMitsourcecode Airline Reservation System Admin Login Page login.php login2 sql injectionEPSS 0.7%CVE-2024-7496MEDIUMitsourcecode Airline Reservation System index.php file inclusionEPSS 0.7%CVE-2024-7499MEDIUMitsourcecode Airline Reservation System flights.php sql injectionEPSS 0.6%CVE-2026-116514MEDIUMitsourcecode Airline Reservation System book_flight.php cross site scriptingEPSS 0.3%CVE-2026-122191MEDIUMitsourcecode Airline Reservation System manage_booked.php sql injectionEPSS 0.2%