CVE-2024-6949

Gargaj wuhu path traversal

State: Published
Severity: 5.3 Medium
Published: Jul 21, 2024
Updated: Aug 1, 2024
Reserved: Jul 20, 2024

Description

A vulnerability classified as problematic was found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected by this vulnerability is an unknown functionality of the file /pages.php?edit=News. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-272071.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N	VulDB
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	VulDB
3.0	4.3 Medium	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	VulDB
2.0	4.0 Medium	AV:N/AC:L/Au:S/C:P/I:N/A:N	VulDB

Weaknesses

CWE-22 Path Traversal

Affected Products

Product	Versions
wuhuGargaj	3faad49bfcc3895e9ff76a591d05c8941273d120Affected

References

VDB-272071 | Gargaj wuhu path traversalvdb-entry
VDB-272071 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
Submit #375146 | wuhu.function.hu Lightweight Party Management System pary 2024 Local File Inclusionthird-party-advisory
https://github.com/DeepMountains/Mirage/blob/main/CVE4-2.mdexploit

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.