PT-2024-15372 · Unknown · Rrj Nueva Ecija Engineer Online Portal

Ahmed8199 · Published 2024-01-02 · Updated 2024-05-17 · CVE-2024-0188

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RRJ Nueva Ecija Engineer Online Portal version 1.0

Description A vulnerability was found in the RRJ Nueva Ecija Engineer Online Portal, affecting an unknown part of the file change password teacher.php. This issue leads to weak password requirements. The attack can be initiated remotely, with a rather high complexity and difficult exploitability. The exploit has been disclosed to the public.

Recommendations For RRJ Nueva Ecija Engineer Online Portal version 1.0, consider implementing stronger password requirements to mitigate the risk of exploitation. As a temporary workaround, restrict access to the change password teacher.php file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2024-0188

Affected Products

Rrj Nueva Ecija Engineer Online Portal

References · 8

• 🔥 https://mega.nz/file/2V9ARboA#-JIGiuLxxbri4T1mDEHl8OBeDrwLogoQlLiIji1AQZk · Exploit
• https://osv.dev/vulnerability/CVE-2024-0188 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0188 · Security Note
• https://t.me/cibsecurity/74183 · Telegram Post
• https://twitter.com/CVEnew/status/1742203106622853494 · Twitter Post
• https://vuldb.com/?id.249501 · Note
• https://vuldb.com/?ctiid.249501 · Note
• https://t.me/cvenotify/66744 · Telegram Post