Vulnerabilities > CVE-2024-0307 - Unspecified vulnerability in Lopalopa Dynamic LAB Management System 1.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
lopalopa
NVD
Published: 2024-01-08
Updated: 2024-11-21

Summary

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login_process.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249874 is the identifier assigned to this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Lopalopa
1

References