CVE-2024-7496: falha de média gravidade em itsourcecode Airline Reservation System
itsourcecode Airline Reservation System index.php file inclusion
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.7%
A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273622 is the identifier assigned to this vulnerability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
itsourcecode · Airline Reservation SystemCVEs relacionadas — itsourcecode Airline Reservation System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-7500MEDIUMitsourcecode Airline Reservation System admin_class.php save_settings unrestricted uploadEPSS 0.7%CVE-2024-7498MEDIUMitsourcecode Airline Reservation System Admin Login Page login.php login2 sql injectionEPSS 0.7%CVE-2024-7497MEDIUMitsourcecode Airline Reservation System index.php file inclusionEPSS 0.7%CVE-2024-7499MEDIUMitsourcecode Airline Reservation System flights.php sql injectionEPSS 0.6%CVE-2026-116514MEDIUMitsourcecode Airline Reservation System book_flight.php cross site scriptingEPSS 0.3%