VulnerabilityModified
CVE-2024-6016
A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0.
MEDIUM 5.3EPSS 0.52%
Does this matter?
Lower severity and a low EPSS score (0.52%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0. Affected by this issue is some unknown functionality of the file admin_class.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268724.
- CVSS 4.0
- 5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.52% probability · 43th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- itsourcecode/laundry management system project in php with source code
- Source
- cna@vuldb.com
References
- https://github.com/chenwulin-bit/cve/issues/2Exploit, Technical Description, Third Party Advisory
- https://vuldb.com/?ctiid.268724Permissions Required
- https://vuldb.com/?id.268724Third Party Advisory
- https://vuldb.com/?submit.357463Issue Tracking
- https://github.com/chenwulin-bit/cve/issues/2Exploit, Technical Description, Third Party Advisory
- https://vuldb.com/?ctiid.268724Permissions Required
- https://vuldb.com/?id.268724Third Party Advisory
- https://vuldb.com/?submit.357463Issue Tracking
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.