CVE-2024-2155

MEDIUM Year: 2024
CVSS v3 Score
4.3
Medium
CVSS v2 Score
4.0
Medium
Weakness Type
CWE-73
View all →

Vulnerability Description

A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255587.

Related Vulnerabilities

CVE-2023-26282

MEDIUM
CVSS:4.2(Medium)

IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and specific knowledge of the system to modify files or data on the system. IBM X-Force ID: 248415.

CWE-732023

CVE-2020-36772

MEDIUM
CVSS:4.4(Medium)

CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside...

CWE-732020

CVE-2023-0008

MEDIUM
CVSS:4.4(Medium)

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through...

CWE-732023

CVE-2024-25965

MEDIUM
CVSS:4.4(Medium)

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A local high privilege attacker could potentially exploit this vulnerability, lead...

CWE-732024

CVE-2024-27175

MEDIUM
CVSS:4.4(Medium)

Remote Command program allows an attacker to read any file using a Local File Inclusion vulnerability. An attacker can read any file on the printer. As for the affected products/models/versions, see t...

CWE-732024

CVE-2025-27137

MEDIUM
CVSS:4.4(Medium)

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the `SYSTEM_CONFIGURATION` perm...

CWE-732025