CVE-2024-11485 — Code4Berry Decoration Management System User userregister.php permission

CVE-2024-11485

Code4Berry Decoration Management System User userregister.php permission PUBLISHED

Description (CNA)

A vulnerability, which was classified as critical, has been found in Code4Berry Decoration Management System 1.0. Affected by this issue is some unknown functionality of the file /decoration/admin/userregister.php of the component User Handler. The manipulation leads to permission issues. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
Code4Berry / Decoration Management System	affected 1.0

CWE

CWE-275, CWE-266

References

https://vuldb.com/?id.285500
https://vuldb.com/?ctiid.285500
https://vuldb.com/?submit.441914

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.