cvelist/2024/0xxx/CVE-2024-0347.json

{
    "data_version": "4.0",
    "data_type": "CVE",
    "data_format": "MITRE",
    "CVE_data_meta": {
        "ID": "CVE-2024-0347",
        "ASSIGNER": "cna@vuldb.com",
        "STATE": "PUBLIC"
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file signup_teacher.php. The manipulation of the argument Password leads to weak password requirements. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250115."
            },
            {
                "lang": "deu",
                "value": "Eine problematische Schwachstelle wurde in SourceCodester Engineers Online Portal 1.0 gefunden. Davon betroffen ist unbekannter Code der Datei signup_teacher.php. Durch Manipulieren des Arguments Password mit unbekannten Daten kann eine weak password requirements-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Die Komplexit\u00e4t eines Angriffs ist eher hoch. Die Ausnutzbarkeit gilt als schwierig. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-521 Weak Password Requirements",
                        "cweId": "CWE-521"
                    }
                ]
            }
        ]
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "SourceCodester",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Engineers Online Portal",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "=",
                                            "version_value": "1.0"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "references": {
        "reference_data": [
            {
                "url": "https://vuldb.com/?id.250115",
                "refsource": "MISC",
                "name": "https://vuldb.com/?id.250115"
            },
            {
                "url": "https://vuldb.com/?ctiid.250115",
                "refsource": "MISC",
                "name": "https://vuldb.com/?ctiid.250115"
            },
            {
                "url": "https://mega.nz/file/2d8GiY4Z#QSKItMUgIsW1-A-QPs9dgUSd2SCZfDg4aHORttFpUF0",
                "refsource": "MISC",
                "name": "https://mega.nz/file/2d8GiY4Z#QSKItMUgIsW1-A-QPs9dgUSd2SCZfDg4aHORttFpUF0"
            }
        ]
    },
    "credits": [
        {
            "lang": "en",
            "value": "ahmed8199 (VulDB User)"
        }
    ],
    "impact": {
        "cvss": [
            {
                "version": "3.1",
                "baseScore": 3.7,
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                "baseSeverity": "LOW"
            },
            {
                "version": "3.0",
                "baseScore": 3.7,
                "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                "baseSeverity": "LOW"
            },
            {
                "version": "2.0",
                "baseScore": 2.6,
                "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N"
            }
        ]
    }
}