CVE-2024-31008

Exploit

EPSS 0.18%
Published 03.04.2024 06:15:07
Last modified 13.05.2025 01:10:52
Source cve@mitre.org
Teams watchlist Login
Open Login

An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Wuzhicms ≫ Wuzhicms Version4.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.18%	0.393

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

https://github.com/majic-banana/vulnerability/blob/main/POC/WUZHICMS4.1.0-Captcha%20bypass%20%28logic%20vulnerability%29.md

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2024-31008

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-31008

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-31008

EUVD