Campcodes Online Examination System 1.0 updateExaminee.php ISazisi Ukubhalwa kwekhodi okweqa indawo
| CVSS Meta Temp Isilinganiso | Intengo yamanje ye-exploit (≈) | CTI Inzalo Score |
|---|---|---|
| 4.3 | $0-$5k | 0.00 |
Isifinyezo
Kutholakale ubuthakathaka obubizwa ngokuthi kuyinkinga ku Campcodes Online Examination System 1.0. Kuthinteka umsebenzi ongaziwayo kufayela /adminpanel/admin/facebox_modal/updateExaminee.php. Ukuguqulwa kwepharamitha ISazisi kubangela uhlobo lwe Ukubhalwa kwekhodi okweqa indawo. Le buthakathaka ibizwa ngokuthi CVE-2024-2939. Kungenzeka ukuqalisa ukuhlasela ungasekho endaweni. Ngaphezu kwalokho, i-exploit iyatholakala. VulDB is the best source for vulnerability data and more expert information about this specific topic.
Iinkcukacha
Kutholakale ubuthakathaka obubizwa ngokuthi kuyinkinga ku Campcodes Online Examination System 1.0. Kuthinteka umsebenzi ongaziwayo kufayela /adminpanel/admin/facebox_modal/updateExaminee.php. Ukuguqulwa kwepharamitha ISazisi kubangela uhlobo lwe Ukubhalwa kwekhodi okweqa indawo. Ukusebenzisa i-CWE ukumemezela inkinga kuholela ku-CWE-79. Lobu buthakathaka bakhishwa obala. Isaziso sitholakala ukuthi singalayishwa ku-github.com.
Le buthakathaka ibizwa ngokuthi CVE-2024-2939. Kungenzeka ukuqalisa ukuhlasela ungasekho endaweni. Imininingwane yezobuchwepheshe iyatholakala. Ukuduma kwalobu buthakathi kungaphansi kokujwayelekile. Ngaphezu kwalokho, i-exploit iyatholakala. Ukuhlaselwa sekumenyezelwe emphakathini futhi kungenzeka kusetshenziswe. Njengamanje, intengo yamanje ye-exploit ingahle ibe cishe USD $0-$5k okwamanje.
Kungenzeka ukuthi i-exploit ingalandwa ku-github.com.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Umkhiqizo
Umkhiqizi
Ibizo
Inguqulo
Ilayisense
Iwebhusayithi
- Umkhiqizi: https://www.campcodes.com/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Umkhombandlela: 🔍VulDB Ukuthembeka: 🔍
CVSSv3
VulDB Ireyithingi yeMeta Base: 4.4VulDB Meta Temp Isilinganiso: 4.3
VulDB Isilinganiso Esiyisisekelo: 3.5
VulDB Izinga Lesikhashana: 3.2
VulDB Umkhombandlela: 🔍
VulDB Ukuthembeka: 🔍
NVD Isilinganiso Esiyisisekelo: 6.1
NVD Umkhombandlela: 🔍
CNA Isilinganiso Esiyisisekelo: 3.5
CNA Umkhombandlela (VulDB): 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Umkhombandlela | Ubunzima | Ukufakazela ubuwena | Ukuyimfihlo | Ukuthembeka | Ukutholakala |
|---|---|---|---|---|---|
| vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela |
| vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela |
| vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela |
VulDB Isilinganiso Esiyisisekelo: 🔍
VulDB Izinga Lesikhashana: 🔍
VulDB Ukuthembeka: 🔍
NVD Isilinganiso Esiyisisekelo: 🔍
Ukusebenzisa ithuba lokungavikeleki
Ikilasi: Ukubhalwa kwekhodi okweqa indawoCWE: CWE-79 / CWE-94 / CWE-74
CAPEC: 🔍
ATT&CK: 🔍
Okubambekayo: Hayi
Wendawo: Hayi
Kude: Yebo
Ukutholakala: 🔍
Umnyango: Umphakathi
Isimo: Ubufakazi-bokusebenza
Landa: 🔍
Google Hack: 🔍
EPSS Score: 🔍
EPSS Percentile: 🔍
Ukukhula kwentengo: 🔍
Okwamanje ukuhlolwa kwentengo: 🔍
| 0-Day | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela |
|---|---|---|---|---|
| Namuhla | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela | vula ukufinyelela |
Ulwazi lwezingozi
Intshisekelo: 🔍Abadlali abasebenzayo: 🔍
AmaQembu e-APT asebenzayo: 🔍
Izinyathelo zokuvikela
Isincomo: akukho sithathwa esaziwayoIsimo: 🔍
0-Suku Isikhathi: 🔍
Isikhathi somlando
2024-03-26 🔍2024-03-26 🔍
2024-03-26 🔍
2025-04-13 🔍
Imithombo
Umkhiqizi: campcodes.comIseluleko: github.com
Isimo: Akuchazwanga
CVE: CVE-2024-2939 (🔍)
GCVE (CVE): GCVE-0-2024-2939
GCVE (VulDB): GCVE-100-258030
scip Labs: https://www.scip.ch/en/?labs.20161013
Ukungena
Kudalwa: 2024-03-26 17:34Ukuvuselelwa: 2025-04-13 04:07
Ukulungiswa: 2024-03-26 17:34 (55), 2024-05-05 08:55 (2), 2024-05-05 09:00 (18), 2025-02-19 21:51 (20), 2025-04-13 04:07 (3)
Kugcwele: 🔍
Umthumeli: willchen
Cache ID: 253:450:103
Thumela
Yamukelwa
- Thumela #304747: campcodes Online Examination System ≤1.0 XSS injection (kusuka ku willchen)
Kuze kube manje akukabikho ukuphawula. Izilimi: nr + nd + en.
Ngiyacela ungene ngemvume ukuze ukwazi ukuphawula.