漏洞标题
源代码库(SourceCodester)成绩点平均值(Grade Point Average,GPA)计算器:index.php信息揭示
漏洞描述信息
源代码程序员GPA计算器index.php信息泄露
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
漏洞类别
N/A
漏洞标题
SourceCodester Grade Point Average GPA Calculator index.php information disclosure
漏洞描述信息
A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page with the input php://filter/read=convert.base64-encode/resource=grade_table leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224670 is the identifier assigned to this vulnerability.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
漏洞类别
信息暴露
漏洞标题
Grade Point Average GPA Calculator 安全漏洞
漏洞描述信息
Grade Point Average GPA Calculator是使用Bootstrap框架搭建的一个在线和自动化计算学生的平均绩点或GPA平台。 SourceCodester Grade Point Average GPA Calculator 1.0版本存在安全漏洞,该漏洞源于文件index.php存在问题,对参数page的操作会导致信息泄露。
CVSS信息
N/A
漏洞类别
其他