PT-2024-18915 · Sourcecodester · Sourcecodester Insurance Management System

Wkeyi0X1 · Published 2024-03-03 · Updated 2025-01-02 · CVE-2024-2150

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Insurance Management System version 1.0

Description A critical issue has been found in the system, affecting some unknown processing. The manipulation of the page argument leads to file inclusion. The attack may be initiated remotely.

Recommendations For version 1.0, consider restricting access to the page argument to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2024-2150

Affected Products

Sourcecodester Insurance Management System

References · 8

• 🔥 https://github.com/wkeyi0x1/vul-report/blob/main/Insurance%20Management%20System%20PHP%20and%20MySQL/Insurance%20Management%20System%20PHP%20and%20MySQL%20v1.0%20-%20File%20Inclusion.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-2150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-2150 · Security Note
• https://t.me/cvenotify/72897 · Telegram Post
• https://vuldb.com/?ctiid.255503 · Note
• https://twitter.com/CVEnew/status/1764354427572383757 · Twitter Post
• https://twitter.com/Esparta6108713/status/1764377780362592513 · Twitter Post
• https://vuldb.com/?id.255503 · Note