Back

CVE-2024-9032

Sept. 20, 2024, 5:04 p.m.

Analyzed
CVE is currently being analyzed by NVD staff, this process results in association of reference link tags, CVSS scores, CWE association, and CPE applicability statements.

Products

SourceCodester Simple Forum-Discussion System

  • 1.0

simple_forum\/discussion_system

  • 1
  • .
  • 0

Source

cna@vuldb.com

Tags

CWE-22
cna@vuldb.com
2024-09-20
CVE-2024-9032

CVE-2024-9032 details

Published : Sept. 20, 2024, 1:15 p.m.
Last Modified : Sept. 20, 2024, 5:04 p.m.

Description

A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS Score

1 2 3 4 5 6 7 8.8 9 10

Weakness

Weakness Name Description
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

8.8

Exploitability Score

2.8

Impact Score

5.9

Base Severity

HIGH

Vector String : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL Source
https://vuldb.com/?ctiid.278202 cna@vuldb.com
https://vuldb.com/?id.278202 cna@vuldb.com
https://vuldb.com/?submit.410976 cna@vuldb.com
https://www.shawroot.cc/2804.html cna@vuldb.com
https://www.sourcecodester.com/ cna@vuldb.com

CPEs

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
a oretnom23 simple_forum\/discussion_system 1.0 / / / / wordpress / /
This website uses the NVD API, but is not approved or certified by it.