CVE-2024-9032: oretnom23 simple forum/discussion system

csirt@kutim:~/threat-intel/cve/CVE-2024-9032

CVSS 8.8 · High EPSS 0,75%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada oretnom23 simple forum/discussion system. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD: 20 September 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EPSS (30 hari): 0,75% peluang dieksploitasi; lebih tinggi dari 53,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
oretnom23	simple forum/discussion system	Versi 1.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://vuldb.com/?id.278202 advisory pihak ketiga
https://vuldb.com/?submit.410976 advisory pihak ketiga
https://www.shawroot.cc/2804.html advisory pihak ketiga
https://www.sourcecodester.com/ exploit
https://vuldb.com/?ctiid.278202 permissions required

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.