CVE-2024-4819

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file admin_class.php. The manipulation of the argument type with the input 1 leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263940.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-285 CWE-639

Affected software

Vendor	Product	Versions
Campcodes	Online Laundry Management System	1.0
campcodes	online_laundry_management_system	1.0

References

https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/IDOR.mdExploit
https://vuldb.com/?ctiid.263940Permissions Required, VDB Entry
https://vuldb.com/?id.263940Permissions Required, VDB Entry
https://vuldb.com/?submit.333058Third Party Advisory, VDB Entry
https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/IDOR.mdExploit
https://vuldb.com/?ctiid.263940Permissions Required, VDB Entry
https://vuldb.com/?id.263940Permissions Required, VDB Entry
https://vuldb.com/?submit.333058Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-481916.3dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=1 CVE-2024-481928.0Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to l CVE-2024-481956.1Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the p CVE-2024-481967.5An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter.CVE-2024-481974.7Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the w CVE-2024-48208.8A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. Affected by this vulnera CVE-2024-482008.4An issue in MobaXterm v24.2 allows a local attacker to escalate privileges and execute arbitrary code via the remove function of the MobaXte CVE-2024-482029.8icecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile.CVE-2024-482049.8SQL injection vulnerability in Hanzhou Haobo network management system 1.0 allows a remote attacker to execute arbitrary code via a crafted CVE-2024-482069.8A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code.CVE-2024-482088.6pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.CVE-2024-48215.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_lightbo