CVE-2024-0472CWE-200

code-projects Dormitory Management System modifyuser.php information disclosure

Low · published January 12, 2024

CVSS v3.1
3.5
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file modifyuser.php. The manipulation of the argument mname leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier VDB-250577 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00558 · 45.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-01-12T21:31Z
EPSS history
Timeline
  • 12 JAN 21:31Z
    code-projects Dormitory Management System modifyuser.php information disclosure
    cvelistv5