Critical severity · published Oct 25, 2024
CVE-2024-10371
SourceCodester Payroll Management System main login buffer overflow
9.8
CVSS
0.8%
EPSS
No
On KEV
Description
A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PM
Payroll Management System · SourceCodester
1.0 · source: vendor, NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-10371
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-10371
Exploit
https://github.com/CveSecLook/cve/issues/63
Permissions Required
https://vuldb.com/?ctiid.281763
Third Party Advisory
https://vuldb.com/?id.281763
Third Party Advisory
https://vuldb.com/?submit.430175
Product
https://www.sourcecodester.com/
More from Payroll Management System
9.8
CVE-2024-34833
Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload