Vulnerability Details CVE-2024-42798
An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.7%
CVSS Severity
CVSS v3 Score 7.6
References
Products affected by CVE-2024-42798
-
cpe:2.3:a:lopalopa:music_management_system:1.0