CVE-2024-0260: SourceCodester Engineers Online Portal Password Change change_password_teacher.php session expiration
A vulnerability, which was classified as problematic, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file changepasswordteacher.php of the component Password Change. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249816.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0260?
CVE-2024-0260 is classified as a problematic vulnerability that can lead to session expiration.
How do I fix CVE-2024-0260?
To fix CVE-2024-0260, ensure that you apply any patches or updates provided by the Engineers Online Portal Project for version 1.0.
What component is affected by CVE-2024-0260?
CVE-2024-0260 affects the 'Password Change' component, specifically the change_password_teacher.php file.
What impact does CVE-2024-0260 have on the Engineers Online Portal?
CVE-2024-0260 can lead to session expiration, compromising user sessions in the Engineers Online Portal.
Who is affected by CVE-2024-0260?
Users of the Engineers Online Portal version 1.0 are affected by CVE-2024-0260 due to vulnerabilities in the password change functionality.