CVE-2024-0306

ALTO 7.5CVE-2024-0306 · Published 08/01/2024 · updated 17/06/2026

In breve

CVE-2024-0306 è una vulnerabilità ALTO (CVSS 7.5) che riguarda dynamic lab management system (lopalopa).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.67%, superiore al 51.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dynamic lab management system lopalopa	`≤ 1.0`	No fix yet

Description

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin_login_process.php. The manipulation of the argument admin_password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249873 was assigned to this vulnerability.

References

E1CHO/cve_hub · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Altre vulnerabilità di dynamic lab management system

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free