SourceCodester Record Management System 1.0 sort2_user.php qualification କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ
Dogoggorri kan akka ସମସ୍ୟାଜନକ jedhamuun ramadame SourceCodester Record Management System 1.0 keessatti argameera. Miidhamni argame is hojii hin beekamne faayilii sort2_user.php keessa. Wanti jijjiirame irratti qualification gara କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ geessa. Rakkoo ibsuuf CWE yoo fayyadamte gara CWE-79 si geessa. Odeeffannoon kun yeroo 10/10/2024 maxxanfameera. Odeeffannoon kun buufachuuf github.com irratti argama. Dogoggorri kun CVE-2024-9810 jedhamee waamama. Weerara fageenya irraa jalqabuu ni danda'ama. Ibsa teeknikaa ni jira. Waan dabalataa ta’een, meeshaa balaa kana fayyadamuuf ni jira. Qorannoo miidhaa (exploit) uummataaf ifa taasifameera, kanaafis fayyadamuu ni danda'ama. Ammas, gatii exploit might be approx. USD $0-$5k yeroo ammaa irratti argamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ ta’uu isaa ibsameera. Exploit github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatiin isaa daldala dhoksaa keessatti $0-$5k akka ta'e tilmaamameera. If you want to get best quality of vulnerability data, you may have to visit VulDB.
2 ଆଡାପ୍ଟେସନ୍ · 58 ପଏଣ୍ଟ
| ଫିଲ୍ଡ | ସୃଷ୍ଟି ହୋଇଛି 10/10/2024 10:41 AM | ଅଦ୍ୟତନ 1/1 03/07/2025 12:29 PM |
|---|---|---|
| cvss3_vuldb_s | U | U |
| cvss3_vuldb_c | N | N |
| cvss3_vuldb_i | L | L |
| cvss3_vuldb_a | N | N |
| cvss3_vuldb_e | P | P |
| cvss3_vuldb_rc | R | R |
| advisory_url | https://github.com/GangZhou1/VUL/blob/main/Record-Management-System-1.md | https://github.com/GangZhou1/VUL/blob/main/Record-Management-System-1.md |
| exploit_availability | 1 | 1 |
| exploit_publicity | 1 | 1 |
| exploit_url | https://github.com/GangZhou1/VUL/blob/main/Record-Management-System-1.md | https://github.com/GangZhou1/VUL/blob/main/Record-Management-System-1.md |
| source_cve | CVE-2024-9810 | CVE-2024-9810 |
| cna_responsible | VulDB | VulDB |
| cvss2_vuldb_av | N | N |
| cvss2_vuldb_ac | L | L |
| cvss2_vuldb_ci | N | N |
| cvss2_vuldb_ii | P | P |
| cvss2_vuldb_ai | N | N |
| cvss2_vuldb_e | POC | POC |
| cvss2_vuldb_rc | UR | UR |
| cvss4_vuldb_av | N | N |
| cvss4_vuldb_ac | L | L |
| cvss4_vuldb_vc | N | N |
| cvss4_vuldb_vi | L | L |
| cvss4_vuldb_va | N | N |
| cvss4_vuldb_e | P | P |
| cvss2_vuldb_au | S | S |
| cvss2_vuldb_rl | ND | ND |
| cvss3_vuldb_pr | L | L |
| cvss3_vuldb_rl | X | X |
| cvss4_vuldb_at | N | N |
| cvss4_vuldb_pr | L | L |
| cvss4_vuldb_ui | N | P |
| cvss4_vuldb_sc | N | N |
| cvss4_vuldb_si | N | N |
| cvss4_vuldb_sa | N | N |
| cvss2_vuldb_basescore | 4.0 | 4.0 |
| cvss2_vuldb_tempscore | 3.4 | 3.4 |
| cvss3_vuldb_basescore | 3.5 | 3.5 |
| cvss3_vuldb_tempscore | 3.2 | 3.2 |
| cvss3_meta_basescore | 3.5 | 3.5 |
| cvss3_meta_tempscore | 3.2 | 3.2 |
| cvss4_vuldb_bscore | 5.3 | 5.1 |
| cvss4_vuldb_btscore | 2.1 | 2.0 |
| advisory_date | 1728511200 (10/10/2024) | 1728511200 (10/10/2024) |
| price_0day | $0-$5k | $0-$5k |
| software_vendor | SourceCodester | SourceCodester |
| software_name | Record Management System | Record Management System |
| software_version | 1.0 | 1.0 |
| software_file | sort2_user.php | sort2_user.php |
| software_argument | qualification | qualification |
| vulnerability_cwe | CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ) | CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ) |
| vulnerability_risk | 1 | 1 |
| cvss3_vuldb_av | N | N |
| cvss3_vuldb_ac | L | L |
| cvss3_vuldb_ui | R | R |