Vulnerability · Published May 13, 2024 · Assigned by VulDB
CVE-2024-4818Campcodes Online Laundry Management System index.php file inclusion
Medium 5.3
In plain English
A medium-severity security flaw in Online Laundry Management System from Campcodes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).
Official description
A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263939.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Campcodes | Online Laundry Management System | 1.0 |
Weakness: CWE-73 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- VDB-263939 | Campcodes Online Laundry Management System index.php file inclusion vdb-entry, technical-description
- VDB-263939 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #333057 | Campcodes Online Laundry Management System 1.0 Local File Inclusion third-party-advisory
- https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/LFI.md exploit