CVE-2024-42794

概要

参考情報

• takekaramey/CVE_Writeup · Exploit
• kashipara.com/project/php/12978/music-management-system-in-php-php-project-source-code · Product

music management system のその他の脆弱性

• CVE-2024-42797緊急 9.8An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. Thi…
• CVE-2024-42798高 7.6An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Musi…
• CVE-2024-42796中 5.9An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This v…
• CVE-2024-42795中 4.2An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara …
• CVE-2024-42793高 8.0A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/aj…