CVE-2024-0472: code-projects Dormitory Management System modifyuser.php information disclosure
First published: Fri Jan 12 2024(Updated: )
A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file modifyuser.php. The manipulation of the argument mname leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier VDB-250577 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| code-projects Dormitory Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-0472?
CVE-2024-0472 has been rated as problematic.
What is the main issue described in CVE-2024-0472?
The main issue in CVE-2024-0472 involves information disclosure due to manipulation of the argument mname in the modifyuser.php file.
Which software versions are affected by CVE-2024-0472?
CVE-2024-0472 affects version 1.0 of the code-projects Dormitory Management System.
How do I fix CVE-2024-0472?
To fix CVE-2024-0472, you should review and sanitize user inputs in the modifyuser.php file to prevent unauthorized access to sensitive information.
Is there a workaround for CVE-2024-0472?
A possible workaround for CVE-2024-0472 includes restricting access to the modifyuser.php file and monitoring logs for unusual activity.
- agent/references
- agent/author
- agent/title
- agent/type
- agent/first-publish-date
- agent/description
- agent/severity
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/last-modified-date
- agent/source
- vendor/code-projects
- canonical/code-projects dormitory management system
- version/code-projects dormitory management system/1.0