Vulnerability · Published Jan 9, 2024 · Assigned by VulDB

CVE-2024-0350SourceCodester Engineers Online Portal session expiration

Low 3.1

In plain English

A low-severity security flaw in Engineers Online Portal from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)3.1Low

Exploit odds (30 days)0.5%top 58.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-250118 is the identifier assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Engineers Online Portal	1.0

Weakness: CWE-613 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

References

https://vuldb.com/?id.250118 vdb-entry
https://vuldb.com/?ctiid.250118 signature, permissions-required
https://mega.nz/file/fckFBASJ#lffaC0xY44ri9Ln-7hrUbUtq2GTiE8roiW8guR7QeVE exploit