CVE-2024-26492

MEDIUM

Online Diagnostic Lab Management System 1.0 - RCE

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-26492. PoCs published by Himash.

AI-analyzed exploit summary This exploit demonstrates an unauthenticated account takeover vulnerability in Online Diagnostic Lab Management System 1.0 by sending a crafted POST request to modify user details, including email and password.

Description

An issue in Online Diagnostic Lab Management System 1.0 allows a remote attacker to gain control of a 'Staff' user account via a crafted POST request using the id, email, password, and cpass parameters.

Exploits (1)

exploitdb WORKING POC
by Himash · textwebappsphp
https://www.exploit-db.com/exploits/50660

This exploit demonstrates an unauthenticated account takeover vulnerability in Online Diagnostic Lab Management System 1.0 by sending a crafted POST request to modify user details, including email and password.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Online Diagnostic Lab Management System 1.0
No auth needed
Prerequisites: Access to the target application's endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 6.3
EPSS 0.0058
EPSS Percentile 43.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (1)
oretnom23/online_diagnostic_lab_management_system 1.0
Published Mar 07, 2024
Tracked Since Feb 18, 2026