ByteOS Network

NVD Vulnerability Details :

CVE-2019-25159

Modified

Source-cna@vuldb.com

Published At-04 Feb, 2024 | 06:15

Updated At-17 May, 2024 | 01:36

A vulnerability was found in mpedraza2020 Intranet del Monterroso up to 4.50.0. It has been classified as critical. This affects an unknown part of the file config/cargos.php. The manipulation of the argument dni_profe leads to sql injection. Upgrading to version 4.51.0 is able to address this issue. The identifier of the patch is 678190bee1dfd64b54a2b0e88abfd009e78adce8. It is recommended to upgrade the affected component. The identifier VDB-252717 was assigned to this vulnerability.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	5.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Secondary	2.0	5.2	MEDIUM	AV:A/AC:L/Au:S/C:P/I:P/A:P

CPE Matches

mpedraza2020>>intranet_del_monterroso>>Versions before 4.51.0(exclusive)

cpe:2.3:a:mpedraza2020:intranet_del_monterroso:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-89	Primary	cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/mpedraza2020/IESMONTEROSOINTRANET/commit/678190bee1dfd64b54a2b0e88abfd009e78adce8	cna@vuldb.com	Patch
https://github.com/mpedraza2020/IESMONTEROSOINTRANET/releases/tag/v4.51.0	cna@vuldb.com	Release Notes
https://vuldb.com/?ctiid.252717	cna@vuldb.com	Permissions Required
https://vuldb.com/?id.252717	cna@vuldb.com	Permissions Required

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History