{"id":"CVE-2024-2150","state":"PUBLISHED","title":"SourceCodester Insurance Management System file inclusion","description":"A vulnerability, which was classified as critical, has been found in SourceCodester Insurance Management System 1.0. This issue affects some unknown processing. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255503.","publishedAt":"2024-03-03T18:00:06.251Z","updatedAt":"2024-08-01T19:03:39.351Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Insurance Management System"],"affected":[{"vendor":"SourceCodester","product":"Insurance Management System","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/?id.255503","https://vuldb.com/?ctiid.255503","https://github.com/wkeyi0x1/vul-report/blob/main/Insurance%20Management%20System%20PHP%20and%20MySQL/Insurance%20Management%20System%20PHP%20and%20MySQL%20v1.0%20-%20File%20Inclusion.md"],"weaknesses":["CWE-73"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/2xxx/CVE-2024-2150.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-2150","state":"PUBLISHED","datePublished":"2024-03-03T18:00:06.251Z","dateUpdated":"2024-08-01T19:03:39.351Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2024-03-02T22:19:08.005Z"},"containers":{"cna":{"title":"SourceCodester Insurance Management System file inclusion","descriptions":[{"lang":"en","value":"A vulnerability, which was classified as critical, has been found in SourceCodester Insurance Management System 1.0. This issue affects some unknown processing. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255503."},{"lang":"de","value":"Eine Schwachstelle wurde in SourceCodester Insurance Management System 1.0 entdeckt. Sie wurde als kritisch eingestuft. Betroffen davon ist ein unbekannter Prozess. Mittels Manipulieren des Arguments page mit unbekannten Daten kann eine file inclusion-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"SourceCodester","product":"Insurance Management System","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.255503","name":"VDB-255503 | SourceCodester Insurance Management System file inclusion","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.255503","name":"VDB-255503 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://github.com/wkeyi0x1/vul-report/blob/main/Insurance%20Management%20System%20PHP%20and%20MySQL/Insurance%20Management%20System%20PHP%20and%20MySQL%20v1.0%20-%20File%20Inclusion.md","tags":["exploit"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-73","type":"CWE","lang":"en","description":"CWE-73 File Inclusion"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2024-03-03T18:00:06.251Z"},"timeline":[{"time":"2024-03-02T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-03-02T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2024-03-02T23:24:12.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"wkeyi0x1 (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"sourcecodester","product":"insurance_management_system","defaultStatus":"unknown","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:sourcecodester:insurance_management_system:1.0:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-03-04T14:21:42.720383Z","id":"CVE-2024-2150","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-28T01:37:19.473Z"}},{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.255503","name":"VDB-255503 | SourceCodester Insurance Management System file inclusion","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.255503","name":"VDB-255503 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required","x_transferred"]},{"url":"https://github.com/wkeyi0x1/vul-report/blob/main/Insurance%20Management%20System%20PHP%20and%20MySQL/Insurance%20Management%20System%20PHP%20and%20MySQL%20v1.0%20-%20File%20Inclusion.md","tags":["exploit","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T19:03:39.351Z"}}]}}}