Vulnerability · Published Aug 15, 2024 · Assigned by VulDB

CVE-2024-7842SourceCodester Online Graduate Tracer System export_it.php information disclosure

Medium 5.3

In plain English

A medium-severity information exposure in Online Graduate Tracer System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)1.0%top 37.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Graduate Tracer System 1.0. This issue affects some unknown processing of the file /tracking/admin/export_it.php. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Online Graduate Tracer System	1.0

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

VDB-274745 | SourceCodester Online Graduate Tracer System export_it.php information disclosure vdb-entry
VDB-274745 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #391562 | sourcecodester Online Graduate Tracer System v1.0 information leakage third-party-advisory
https://github.com/Wsstiger/cve/blob/main/Tracer_info.md exploit