CVE-2024-0472: code-projects Dormitory Management System modifyuser.php information disclosure
A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file modifyuser.php. The manipulation of the argument mname leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier VDB-250577 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0472?
CVE-2024-0472 has been rated as problematic.
What is the main issue described in CVE-2024-0472?
The main issue in CVE-2024-0472 involves information disclosure due to manipulation of the argument mname in the modifyuser.php file.
Which software versions are affected by CVE-2024-0472?
CVE-2024-0472 affects version 1.0 of the code-projects Dormitory Management System.
How do I fix CVE-2024-0472?
To fix CVE-2024-0472, you should review and sanitize user inputs in the modifyuser.php file to prevent unauthorized access to sensitive information.
Is there a workaround for CVE-2024-0472?
A possible workaround for CVE-2024-0472 includes restricting access to the modifyuser.php file and monitoring logs for unusual activity.