by Kastro
Paper/Archive/CVE-2024-2557

CVE-2024-2557

kishor-23 Food Waste Management System — kishor-23 Food Waste Management System admin.php improper authorization

EPSS 1%public exploitCVSS 9.1
critical.is priorityof 100
50
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 63.3.633 × 2012.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin.php. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257056. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected

ProductAffectedFixed inSource
Food Waste Management System1.0–CNA
food_waste_management_system1.0–CISA-ADP

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
VulDB (CNA)5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
VulDB (CNA)5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refvuldb.com/?id.257056refvuldb.com/?ctiid.257056exploitgithub.com/vanitashtml/CVE-Dumps/blob/main/Execute%20After%20Redirect%20-%20Food%20Management%20System.md