← Back to CVE List

CVE-2024-26492

Published: 2024-03-07T21:15Z
Last Modified: 2024-11-21T09:02Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue in Online Diagnostic Lab Management System 1.0 allows a remote attacker to gain control of a 'Staff' user account via a crafted POST request using the id, email, password, and cpass parameters. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt