CVE-2024-3089
PHPGurukul Emergency Ambulance Hiring Portal Manage Ambulance Page manage-ambulance.php cross-site request forgery
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/manage-ambulance.php of the component Manage Ambulance Page. The manipulation of the argument del leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-258682 is the identifier assigned to this vulnerability.
Una vulnerabilidad fue encontrada en PHPGurukul Emergency Ambulance Hiring Portal 1.0 y clasificada como problemática. Esta vulnerabilidad afecta a un código desconocido del archivo /admin/manage-ambulance.php del componente Manage Ambulance Page. La manipulación del argumento del conduce a la Cross-Site Request Forgery. El ataque se puede iniciar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-258682 es el identificador asignado a esta vulnerabilidad.
In PHPGurukul Emergency Ambulance Hiring Portal 1.0 wurde eine problematische Schwachstelle gefunden. Betroffen ist eine unbekannte Verarbeitung der Datei /admin/manage-ambulance.php der Komponente Manage Ambulance Page. Mittels Manipulieren des Arguments del mit unbekannten Daten kann eine cross-site request forgery-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2024-03-29 CVE Reserved
- 2024-03-30 CVE Published
- 2024-03-31 EPSS Updated
- 2024-04-05 First Exploit
- 2024-08-01 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
References (4)
URL | Tag | Source |
---|---|---|
https://vuldb.com/?id.258682 | Technical Description | |
https://vuldb.com/?submit.306963 | Third Party Advisory |
URL | Date | SRC |
---|---|---|
https://github.com/XenoM0rph97/CVE-2024-30896 | 2024-04-05 | |
https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/eahp_csrf.md | 2024-08-01 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
PHPGurukul Search vendor "PHPGurukul" | Emergency Ambulance Hiring Portal Search vendor "PHPGurukul" for product "Emergency Ambulance Hiring Portal" | 1.0 Search vendor "PHPGurukul" for product "Emergency Ambulance Hiring Portal" and version "1.0" | en |
Affected
|