Security Advisory

CVE-2024-40480

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-08-09 00:00:00

Last updated 2025-03-14 15:12:51

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete valid user accounts via the direct URL access.

← Browse all CVEs View on cve.org ↗