Vulnerabilities > CVE-2024-0306 - Unspecified vulnerability in Lopalopa Dynamic LAB Management System 1.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
lopalopa
NVD
Published: 2024-01-08
Updated: 2024-11-21

Summary

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin_login_process.php. The manipulation of the argument admin_password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249873 was assigned to this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Lopalopa
1

References