Vulnerability · Published Jan 9, 2024 · Assigned by VulDB

CVE-2024-0347SourceCodester Engineers Online Portal signup_teacher.php weak password

Low 3.7

In plain English

A low-severity security flaw in Engineers Online Portal from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).

Severity (CVSS 3.1)3.7Low

Exploit odds (30 days)0.9%top 39.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file signup_teacher.php. The manipulation of the argument Password leads to weak password requirements. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250115.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Engineers Online Portal	1.0

Weakness: CWE-521 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References

https://vuldb.com/?id.250115 vdb-entry, technical-description
https://vuldb.com/?ctiid.250115 signature, permissions-required
https://mega.nz/file/2d8GiY4Z#QSKItMUgIsW1-A-QPs9dgUSd2SCZfDg4aHORttFpUF0 exploit