-
Notifications
You must be signed in to change notification settings - Fork 172
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- 1 new CVEs: CVE-2024-10158 - 1 updated CVEs: CVE-2024-29916
- Loading branch information
cvelistV5 Github Action
committed
Oct 19, 2024
1 parent
c51bfdc
commit f192703
Showing
4 changed files
with
193 additions
and
65 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,151 @@ | ||
| { | ||
| "dataType": "CVE_RECORD", | ||
| "dataVersion": "5.1", | ||
| "cveMetadata": { | ||
| "cveId": "CVE-2024-10158", | ||
| "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", | ||
| "state": "PUBLISHED", | ||
| "assignerShortName": "VulDB", | ||
| "dateReserved": "2024-10-18T19:16:44.505Z", | ||
| "datePublished": "2024-10-19T23:00:07.132Z", | ||
| "dateUpdated": "2024-10-19T23:00:07.132Z" | ||
| }, | ||
| "containers": { | ||
| "cna": { | ||
| "providerMetadata": { | ||
| "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", | ||
| "shortName": "VulDB", | ||
| "dateUpdated": "2024-10-19T23:00:07.132Z" | ||
| }, | ||
| "title": "PHPGurukul Boat Booking System session_start session fixiation", | ||
| "problemTypes": [ | ||
| { | ||
| "descriptions": [ | ||
| { | ||
| "type": "CWE", | ||
| "cweId": "CWE-384", | ||
| "lang": "en", | ||
| "description": "Session Fixiation" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "affected": [ | ||
| { | ||
| "vendor": "PHPGurukul", | ||
| "product": "Boat Booking System", | ||
| "versions": [ | ||
| { | ||
| "version": "1.0", | ||
| "status": "affected" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "descriptions": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "A vulnerability classified as problematic has been found in PHPGurukul Boat Booking System 1.0. Affected is the function session_start. The manipulation leads to session fixiation. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used." | ||
| }, | ||
| { | ||
| "lang": "de", | ||
| "value": "Es wurde eine problematische Schwachstelle in PHPGurukul Boat Booking System 1.0 entdeckt. Betroffen hiervon ist die Funktion session_start. Durch Manipulation mit unbekannten Daten kann eine session fixiation-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung." | ||
| } | ||
| ], | ||
| "metrics": [ | ||
| { | ||
| "cvssV4_0": { | ||
| "version": "4.0", | ||
| "baseScore": 6.9, | ||
| "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", | ||
| "baseSeverity": "MEDIUM" | ||
| } | ||
| }, | ||
| { | ||
| "cvssV3_1": { | ||
| "version": "3.1", | ||
| "baseScore": 4.3, | ||
| "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", | ||
| "baseSeverity": "MEDIUM" | ||
| } | ||
| }, | ||
| { | ||
| "cvssV3_0": { | ||
| "version": "3.0", | ||
| "baseScore": 4.3, | ||
| "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", | ||
| "baseSeverity": "MEDIUM" | ||
| } | ||
| }, | ||
| { | ||
| "cvssV2_0": { | ||
| "version": "2.0", | ||
| "baseScore": 5, | ||
| "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N" | ||
| } | ||
| } | ||
| ], | ||
| "timeline": [ | ||
| { | ||
| "time": "2024-10-18T00:00:00.000Z", | ||
| "lang": "en", | ||
| "value": "Advisory disclosed" | ||
| }, | ||
| { | ||
| "time": "2024-10-18T02:00:00.000Z", | ||
| "lang": "en", | ||
| "value": "VulDB entry created" | ||
| }, | ||
| { | ||
| "time": "2024-10-18T21:22:13.000Z", | ||
| "lang": "en", | ||
| "value": "VulDB entry last update" | ||
| } | ||
| ], | ||
| "credits": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "jadu101 (VulDB User)", | ||
| "type": "reporter" | ||
| } | ||
| ], | ||
| "references": [ | ||
| { | ||
| "url": "https://vuldb.com/?id.280944", | ||
| "name": "VDB-280944 | PHPGurukul Boat Booking System session_start session fixiation", | ||
| "tags": [ | ||
| "vdb-entry", | ||
| "technical-description" | ||
| ] | ||
| }, | ||
| { | ||
| "url": "https://vuldb.com/?ctiid.280944", | ||
| "name": "VDB-280944 | CTI Indicators (IOB, IOC, IOA)", | ||
| "tags": [ | ||
| "signature", | ||
| "permissions-required" | ||
| ] | ||
| }, | ||
| { | ||
| "url": "https://vuldb.com/?submit.425414", | ||
| "name": "Submit #425414 | PHPGurukul Boat Booking System 1.0 Session Fixiation", | ||
| "tags": [ | ||
| "third-party-advisory" | ||
| ] | ||
| }, | ||
| { | ||
| "url": "https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_session_fixation.md", | ||
| "tags": [ | ||
| "exploit" | ||
| ] | ||
| }, | ||
| { | ||
| "url": "https://phpgurukul.com/", | ||
| "tags": [ | ||
| "product" | ||
| ] | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,14 +1,21 @@ | ||
| { | ||
| "fetchTime": "2024-10-19T22:36:15.704Z", | ||
| "numberOfChanges": 1, | ||
| "fetchTime": "2024-10-19T23:00:11.627Z", | ||
| "numberOfChanges": 2, | ||
| "new": [ | ||
| { | ||
| "cveId": "CVE-2024-10157", | ||
| "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-10157", | ||
| "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/10xxx/CVE-2024-10157.json", | ||
| "dateUpdated": "2024-10-19T22:31:05.359Z" | ||
| "cveId": "CVE-2024-10158", | ||
| "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-10158", | ||
| "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/10xxx/CVE-2024-10158.json", | ||
| "dateUpdated": "2024-10-19T23:00:07.132Z" | ||
| } | ||
| ], | ||
| "updated": [ | ||
| { | ||
| "cveId": "CVE-2024-29916", | ||
| "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-29916", | ||
| "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29916.json", | ||
| "dateUpdated": "2024-10-19T22:56:01.256760" | ||
| } | ||
| ], | ||
| "updated": [], | ||
| "error": [] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters