CVE-2023-38965

概要

参考情報

• packetstormsecurity.com/files/175077/Lost-And-Found-Information-System-1.0-Insecure-Direct-Object-Reference.html · Exploit
• Or4ngm4n/vulnreability-code-review-php · Exploit
• exploit-db.com/exploits/51795

lost and found information system のその他の脆弱性

• CVE-2024-37859中 6.1Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page par…
• CVE-2024-37858緊急 9.8SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to…
• CVE-2024-37857高 8.8SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php…
• CVE-2024-37856中 5.4Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, l…
• CVE-2023-33676高 8.4Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*" whi…