Various Vulnerabilities Discovered in Gargaj Wuhu

CVE-2024-6949

5.3MEDIUM

Key Information

Vendor: Gargaj
Status: Wuhu
Vendor: CVE Published:; 21 July 2024

Summary

A vulnerability classified as problematic was found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected by this vulnerability is an unknown functionality of the file /pages.php?edit=News. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-272071.

Affected Version(s)

wuhu = 3faad49bfcc3895e9ff76a591d05c8941273d120

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Risk change from: null to: 4.3 - (MEDIUM)
Jul 21, 2024
Vulnerability published.
Jul 21, 2024
VulDB entry last update
Jul 20, 2024
Vulnerability Reserved.
Jul 20, 2024
VulDB entry created
Jul 20, 2024
Advisory disclosed
Jul 20, 2024

Collectors

NVD DatabaseMitre Database

Credit

Dee.Mirage (VulDB User)