CVE-2024-7497

A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273623.
References
Link Resource
https://github.com/DeepMountains/zzz/blob/main/CVE1-2.md Exploit
https://vuldb.com/?ctiid.273623 Permissions Required Third Party Advisory
https://vuldb.com/?id.273623 Third Party Advisory
https://vuldb.com/?submit.385893 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:angeljudesuarez:airline_reservation_system:1.0:*:*:*:*:*:*:*

History

19 Aug 2024, 16:49

Type Values Removed Values Added
References () https://github.com/DeepMountains/zzz/blob/main/CVE1-2.md - () https://github.com/DeepMountains/zzz/blob/main/CVE1-2.md - Exploit
References () https://vuldb.com/?ctiid.273623 - () https://vuldb.com/?ctiid.273623 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.273623 - () https://vuldb.com/?id.273623 - Third Party Advisory
References () https://vuldb.com/?submit.385893 - () https://vuldb.com/?submit.385893 - Third Party Advisory
CWE NVD-CWE-Other
CVSS v2 : 6.5
v3 : 6.3
v2 : 6.5
v3 : 8.8
First Time Angeljudesuarez airline Reservation System
Angeljudesuarez
CPE cpe:2.3:a:angeljudesuarez:airline_reservation_system:1.0:*:*:*:*:*:*:*

06 Aug 2024, 16:30

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad fue encontrada en itsourcecode Airline Reservation System 1.0 y clasificada como crítica. Este problema afecta un procesamiento desconocido del archivo /admin/index.php. La manipulación de la página de argumentos conduce a la inclusión del archivo. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. El identificador asociado de esta vulnerabilidad es VDB-273623.

06 Aug 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-06 02:15

Updated : 2024-08-19 16:49


NVD link : CVE-2024-7497

Mitre link : CVE-2024-7497

CVE.ORG link : CVE-2024-7497


JSON object : View

Products Affected

angeljudesuarez

  • airline_reservation_system
CWE
NVD-CWE-Other CWE-73

External Control of File Name or Path