Paper/Archive/CVE-2024-32167

CVE-2024-32167

oretnom23 online_medicine_ordering_system — Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have th…

EPSS 0.7%public exploit CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (ADP, NVD agree)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 52.0.520 × 2010.4 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

online_medicine_ordering_system1.0–CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refgithub.com/ss122-0ss/cms/blob/main/omos.md