A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file signup_teacher.php. The manipulation of the argument Password leads to weak password requirements. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250115.
References
| Link | Resource |
|---|---|
| https://mega.nz/file/2d8GiY4Z#QSKItMUgIsW1-A-QPs9dgUSd2SCZfDg4aHORttFpUF0 | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.250115 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.250115 | Third Party Advisory VDB Entry |
| https://mega.nz/file/2d8GiY4Z#QSKItMUgIsW1-A-QPs9dgUSd2SCZfDg4aHORttFpUF0 | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.250115 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.250115 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://mega.nz/file/2d8GiY4Z#QSKItMUgIsW1-A-QPs9dgUSd2SCZfDg4aHORttFpUF0 - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.250115 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.250115 - Third Party Advisory, VDB Entry |
12 Jan 2024, 18:19
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.7 |
| First Time |
Engineers Online Portal Project
Engineers Online Portal Project engineers Online Portal |
|
| CPE | cpe:2.3:a:engineers_online_portal_project:engineers_online_portal:1.0:*:*:*:*:*:*:* | |
| References | () https://vuldb.com/?id.250115 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.250115 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | () https://mega.nz/file/2d8GiY4Z#QSKItMUgIsW1-A-QPs9dgUSd2SCZfDg4aHORttFpUF0 - Exploit, Third Party Advisory |
09 Jan 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-09 22:15
Updated : 2024-11-21 08:46
NVD link : CVE-2024-0347
Mitre link : CVE-2024-0347
CVE.ORG link : CVE-2024-0347
JSON object : View
Products Affected
engineers_online_portal_project
- engineers_online_portal
CWE
CWE-521
Weak Password Requirements