PT-2024-38490 · Sourcecodester · Sourcecodester Car Driving School Management System

Bfs-Lab · Published 2024-08-11 · Updated 2024-08-15 · CVE-2024-7662

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Car Driving School Management System version 1.0

Description A vulnerability was found in the system, affecting the save package function of the file admin/packages/manag package.php. This issue leads to cross-site request forgery and can be initiated remotely.

Recommendations For SourceCodester Car Driving School Management System version 1.0, consider disabling the save package function in the admin/packages/manag package.php file as a temporary workaround until a patch is available. Restrict access to the admin/packages/manag package.php file to minimize the risk of exploitation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-7662

Affected Products

Sourcecodester Car Driving School Management System

References · 7

• 🔥 https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20CSRF-2.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-7662 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7662 · Security Note
• https://vuldb.com/?id.274120 · Note
• https://vuldb.com/?ctiid.274120 · Note
• https://vuldb.com/?submit.388766 · Note
• https://twitter.com/VulmonFeeds/status/1823012053818179983 · Twitter Post