An Incorrect Access Control vulnerability was found in /smsa/admin_dashboard.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view administrator dashboard.
References
| Link | Resource |
|---|---|
| https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20Dashboard.pdf | Exploit Third Party Advisory |
Configurations
History
08 Aug 2024, 15:08
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CPE | cpe:2.3:a:lopalopa:responsive_school_management_system:3.2.0:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-Other | |
| First Time |
Lopalopa responsive School Management System
Lopalopa |
|
| References | () https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20Dashboard.pdf - Exploit, Third Party Advisory | |
| Summary |
|
07 Aug 2024, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
07 Aug 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-07 16:15
Updated : 2024-08-08 15:08
NVD link : CVE-2024-41246
Mitre link : CVE-2024-41246
CVE.ORG link : CVE-2024-41246
JSON object : View
Products Affected
lopalopa
- responsive_school_management_system
CWE