CVE-2024-8711

MEDIUM

SourceCodester Food Ordering Management System 1.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1.0. Affected by this issue is some unknown functionality of the file /includes/. The manipulation leads to exposure of information through directory listing. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.277220
Permissions Required signature permissions-required
https://vuldb.com/?ctiid.277220
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.405343

Scores

CVSS v3 5.3
EPSS 0.0019
EPSS Percentile 40.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-548
Status published
Products (1)
oretnom23/food_ordering_management_system 1.0
Published Sep 12, 2024
Tracked Since Feb 18, 2026