Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2024-0472 Details
Description
A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file modifyuser.php. The manipulation of the argument mname leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier VDB-250577 was assigned to this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 24, 2024Exploitation: NoneAutomatable: YesTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/yingqian1984/FirePunch/blob/main/7-Dormitory%20Management%20System%20has%20Database%20information%20leakage%20modifyuser.php.pdf | CVE | Broken Link |
| https://vuldb.com/?ctiid.250577 | CVE | Permissions RequiredThird Party Advisory |
| https://vuldb.com/?id.250577 | CVE | Permissions RequiredThird Party Advisory |
| https://github.com/yingqian1984/FirePunch/blob/main/7-Dormitory%20Management%20System%20has%20Database%20information%20leakage%20modifyuser.php.pdf | [email protected] | Broken Link |
| https://vuldb.com/?ctiid.250577 | [email protected] | Permissions RequiredThird Party Advisory |
| https://vuldb.com/?id.250577 | [email protected] | Permissions RequiredThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | [email protected] |
| CWE-532 | Insertion of Sensitive Information into Log File | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| code-projects dormitory management system | 1.0 |
CPE
Remediation
| |
Change History
12 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 21, 2024 | CVE Modified | CVE |
| Oct 24, 2024 | CVE Modified | CISA-ADP |
| May 17, 2024 | CVE Modified | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| Apr 11, 2024 | CVE Modified | [email protected] |
| Mar 21, 2024 | CVE Modified | [email protected] |
| Feb 29, 2024 | CVE Modified | [email protected] |
| Feb 9, 2024 | CVE Modified | [email protected] |
| Jan 19, 2024 | Initial Analysis | [email protected] |
| Jan 12, 2024 | New CVE Received | [email protected] |