Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-11485 EUVD-2024-34133GHSA-mq9r-w66p-33m3

Code4Berry Decoration Management System User userregister.php permission

Published Nov 20, 2024 · Updated Dec 2, 2024 · Assigned by VulDB

Description

A vulnerability, which was classified as critical, has been found in Code4Berry Decoration Management System 1.0. Affected by this issue is some unknown functionality of the file /decoration/admin/userregister.php of the component User Handler. The manipulation leads to permission issues. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

VendorProductAffectedFixed
Code4Berry Decoration Management System 1.0 —

References