PT-2024-15483 · Unknown · Sourcecodester Engineers Online Portal

Ahmed8199 · Published 2024-01-09 · Updated 2024-05-17 · CVE-2024-0347

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Engineers Online Portal version 1.0

Description A vulnerability was found in the processing of the file signup teacher.php, where the manipulation of the argument Password leads to weak password requirements. The attack may be initiated remotely, with a rather high complexity and difficult exploitation. The exploit has been disclosed to the public and may be used.

Recommendations For SourceCodester Engineers Online Portal version 1.0, consider implementing stronger password requirements to mitigate the risk of exploitation. As a temporary workaround, restrict the use of the Password argument in the signup teacher.php file until a more secure solution is implemented.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2024-0347

Affected Products

Sourcecodester Engineers Online Portal

References · 8

• 🔥 https://mega.nz/file/2d8GiY4Z#QSKItMUgIsW1-A-QPs9dgUSd2SCZfDg4aHORttFpUF0 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-0347 · Security Note
• https://osv.dev/vulnerability/CVE-2024-0347 · Vendor Advisory
• https://twitter.com/CVEnew/status/1744845483561152709 · Twitter Post
• https://vuldb.com/?ctiid.250115 · Note
• https://vuldb.com/?id.250115 · Note
• https://t.me/cvenotify/67284 · Telegram Post
• https://t.me/cvenotify/66838 · Telegram Post