CVE-2024-7842

CWE-200 — Information Exposure3 documents3 sources

Severity

6.9MEDIUM

EPSS

0.2%

top 51.88%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Online Graduate Tracer System Tamparongj03 Online Graduate Tracer System

Timeline

PublishedAug 15

Latest updateAug 16

Description

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Graduate Tracer System 1.0. This issue affects some unknown processing of the file /tracking/admin/export_it.php. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5sourcecodester/online_graduate_tracer_system1.0

▶NVDtamparongj03/online_graduate_tracer_system1.0

🔴Vulnerability Details

GHSA

GHSA-w7f7-5mx6-5cpc: A vulnerability, which was classified as problematic, has been found in SourceCodester Online Graduate Tracer System 1↗2024-08-16

▶

CVEList

SourceCodester Online Graduate Tracer System export_it.php information disclosure↗2024-08-15

▶