CVE-2024-0188: RRJ Nueva Ecija Engineer Online Portal change_password_teacher.php weak password

Published Jan 2, 2024
·
Updated

A vulnerability, which was classified as problematic, was found in RRJ Nueva Ecija Engineer Online Portal 1.0. This affects an unknown part of the file changepasswordteacher.php. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-249501 was assigned to this vulnerability.

Affected Software

1 affected component
NIA RRJ Nueva Ecija Engineer Online Portal=1.0

Event History

Jan 2, 2024
CVE Published
03:00 PM
Data Sourced
03:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-0188?

CVE-2024-0188 is classified as a problematic vulnerability due to its potential for weak password requirements.

2

How do I fix CVE-2024-0188?

To fix CVE-2024-0188, you should implement stronger password requirements in the change_password_teacher.php file.

3

What kind of attack can CVE-2024-0188 lead to?

CVE-2024-0188 can lead to unauthorized access due to weak password configurations exploitable by remote attackers.

4

Which software versions are affected by CVE-2024-0188?

CVE-2024-0188 affects RRJ Nueva Ecija Engineer Online Portal version 1.0.

5

Is remote exploitation possible with CVE-2024-0188?

Yes, CVE-2024-0188 can be exploited remotely, facilitating unauthorized access to the system.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203