{"id":"CVE-2024-0260","state":"PUBLISHED","title":"SourceCodester Engineers Online Portal Password Change change_password_teacher.php session expiration","description":"A vulnerability, which was classified as problematic, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file change_password_teacher.php of the component Password Change. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249816.","publishedAt":"2024-01-07T00:00:07.682Z","updatedAt":"2025-06-17T20:29:14.573Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Engineers Online Portal"],"affected":[{"vendor":"SourceCodester","product":"Engineers Online Portal","versions":[{"version":"1.0","status":"affected"}],"modules":["Password Change"]}],"references":["https://vuldb.com/?id.249816","https://vuldb.com/?ctiid.249816","https://mega.nz/file/yEsSwK6D#--ygVt0NtzhZdqVxvjaPLCYfnIeBSyf76KaRozOxfVo"],"weaknesses":["CWE-613"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/0xxx/CVE-2024-0260.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-0260","state":"PUBLISHED","datePublished":"2024-01-07T00:00:07.682Z","dateUpdated":"2025-06-17T20:29:14.573Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2024-01-06T08:29:19.086Z"},"containers":{"cna":{"title":"SourceCodester Engineers Online Portal Password Change change_password_teacher.php session expiration","descriptions":[{"lang":"en","value":"A vulnerability, which was classified as problematic, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file change_password_teacher.php of the component Password Change. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249816."},{"lang":"de","value":"Es wurde eine Schwachstelle in SourceCodester Engineers Online Portal 1.0 gefunden. Sie wurde als problematisch eingestuft. Hiervon betroffen ist ein unbekannter Codeblock der Datei change_password_teacher.php der Komponente Password Change. Mittels Manipulieren mit unbekannten Daten kann eine session expiration-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"SourceCodester","product":"Engineers Online Portal","versions":[{"version":"1.0","status":"affected"}],"modules":["Password Change"]}],"references":[{"url":"https://vuldb.com/?id.249816","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.249816","tags":["signature","permissions-required"]},{"url":"https://mega.nz/file/yEsSwK6D#--ygVt0NtzhZdqVxvjaPLCYfnIeBSyf76KaRozOxfVo","tags":["exploit"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-613","type":"CWE","lang":"en","description":"CWE-613 Session Expiration"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2024-01-07T00:00:07.682Z"},"timeline":[{"time":"2024-01-06T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-01-06T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2024-01-06T09:35:03.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"ahmed8199 (VulDB User)","type":"analyst"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.249816","tags":["vdb-entry","x_transferred"]},{"url":"https://vuldb.com/?ctiid.249816","tags":["signature","permissions-required","x_transferred"]},{"url":"https://mega.nz/file/yEsSwK6D#--ygVt0NtzhZdqVxvjaPLCYfnIeBSyf76KaRozOxfVo","tags":["exploit","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T17:41:16.562Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-0260","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-02-22T18:22:52.542130Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-17T20:29:14.573Z"}}]}}}