{"id":"CVE-2024-0472","state":"PUBLISHED","title":"code-projects Dormitory Management System modifyuser.php information disclosure","description":"A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file modifyuser.php. The manipulation of the argument mname leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier VDB-250577 was assigned to this vulnerability.","publishedAt":"2024-01-12T21:31:03.824Z","updatedAt":"2024-10-24T15:24:20.532Z","severity":{"score":3.5,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"VulDB"},"assigner":"VulDB","products":["code-projects Dormitory Management System"],"affected":[{"vendor":"code-projects","product":"Dormitory Management System","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/?id.250577","https://vuldb.com/?ctiid.250577","https://github.com/yingqian1984/FirePunch/blob/main/7-Dormitory%20Management%20System%20has%20Database%20information%20leakage%20modifyuser.php.pdf"],"weaknesses":["CWE-200","CWE-532"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/0xxx/CVE-2024-0472.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-0472","state":"PUBLISHED","datePublished":"2024-01-12T21:31:03.824Z","dateUpdated":"2024-10-24T15:24:20.532Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2024-01-12T10:52:34.240Z"},"containers":{"cna":{"title":"code-projects Dormitory Management System modifyuser.php information disclosure","descriptions":[{"lang":"en","value":"A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file modifyuser.php. The manipulation of the argument mname leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier VDB-250577 was assigned to this vulnerability."},{"lang":"de","value":"Eine Schwachstelle wurde in code-projects Dormitory Management System 1.0 ausgemacht. Sie wurde als problematisch eingestuft. Dies betrifft einen unbekannten Teil der Datei modifyuser.php. Durch Manipulieren des Arguments mname mit unbekannten Daten kann eine information disclosure-Schwachstelle ausgenutzt werden. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"code-projects","product":"Dormitory Management System","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.250577","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.250577","tags":["signature","permissions-required"]},{"url":"https://github.com/yingqian1984/FirePunch/blob/main/7-Dormitory%20Management%20System%20has%20Database%20information%20leakage%20modifyuser.php.pdf","tags":["broken-link","exploit"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":3.5,"vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseSeverity":"LOW"}},{"cvssV3_0":{"version":"3.0","baseScore":3.5,"vectorString":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseSeverity":"LOW"}},{"cvssV2_0":{"version":"2.0","baseScore":2.7,"vectorString":"AV:A/AC:L/Au:S/C:P/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"CWE-200 Information Disclosure"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2024-02-09T19:10:12.170Z"},"timeline":[{"time":"2024-01-12T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-01-12T00:00:00.000Z","lang":"en","value":"CVE reserved"},{"time":"2024-01-12T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2024-02-02T10:46:55.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"FirePunch (VulDB User)","type":"reporter"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.250577","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.250577","tags":["signature","permissions-required","x_transferred"]},{"url":"https://github.com/yingqian1984/FirePunch/blob/main/7-Dormitory%20Management%20System%20has%20Database%20information%20leakage%20modifyuser.php.pdf","tags":["broken-link","exploit","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T18:04:49.705Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-24T15:16:43.969243Z","id":"CVE-2024-0472","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-532","type":"CWE","lang":"en","description":"CWE-532 Insertion of Sensitive Information into Log File"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-24T15:24:20.532Z"}}]}}}