CVEvulnerability
CVE-2024-10371
5.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-10-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 5.3 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-120
Description
A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used.
Affected configurations
• razormist payroll management system 1.0
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://github.com/CveSecLook/cve/issues/63 Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.281763 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.281763 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.430175 Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/ Product