Description
An issue in Online Diagnostic Lab Management System 1.0 allows a remote attacker to gain control of a 'Staff' user account via a crafted POST request using the id, email, password, and cpass parameters.
Medium · 6.3
CVE-2024-26492
EUVD-2024-23757GHSA-8497-6qx5-88vv
An issue in Online Diagnostic Lab Management System 1.0 allows a remote attacker to gain control of a 'Staff' user account via a crafted PO…
Published Mar 7, 2024 · Updated Nov 18, 2024 · Assigned by mitre