CVE-2024-9032
SourceCodester Simple Forum-Discussion System index.php path traversal
- State
- Published
- Severity
- 5.3 Medium
- Published
- Sep 20, 2024
- Updated
- Sep 20, 2024
- Reserved
- Sep 20, 2024
Description
A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P | VulDB |
Weaknesses
- CWE-22 Path Traversal
Affected Products
| Product | Versions |
|---|---|
Simple Forum-Discussion SystemSourceCodester |
|
References
- VDB-278202 | SourceCodester Simple Forum-Discussion System index.php path traversalvdb-entrytechnical-description
- VDB-278202 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #410976 | oretnom23 Simple Forum/discussion System 1.0 Directory traversalthird-party-advisory
- https://www.shawroot.cc/2804.htmlexploit
- https://www.sourcecodester.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.