CVE-2024-2483

A vulnerability, which was classified as problematic, has been found in Surya2Developer Hostel Management Service 1.0. This issue affects some unknown processing of the file /change-password.php of the component Password Change Handler. The manipulation of the argument oldpassword leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256889 was assigned to this vulnerability.

• CWE-352

• https://github.com/blackslim3/cve_sidequest/blob/main/poc/CSRF%20on%20Hostel%20Management%20System%20using%20PHP%20and%20MySQL%201.0.md
• https://vuldb.com/?ctiid.256889
• https://vuldb.com/?id.256889
• https://github.com/blackslim3/cve_sidequest/blob/main/poc/CSRF%20on%20Hostel%20Management%20System%20using%20PHP%20and%20MySQL%201.0.md
• https://vuldb.com/?ctiid.256889
• https://vuldb.com/?id.256889

Published

Mar 15, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-24824Graylog is a free and open log management platform. Starting…8.8
• CVE-2024-24825DIRAC is a distributed resource framework. In affected versi…7.5
• CVE-2024-24826Exiv2 is a command-line utility and C++ library for reading,…5
• CVE-2024-24827Discourse is an open source platform for community discussio…7.5
• CVE-2024-24828pkg is tool design to bundle Node.js projects into an execut…7.8
• CVE-2024-24829Sentry is an error tracking and performance monitoring platf…5.3
• CVE-2024-24830OpenObserve is a observability platform built specifically f…8.8
• CVE-2024-24831Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2024-24832Missing Authorization vulnerability in Metagauss EventPrime.…7.5
• CVE-2024-24833Missing Authorization vulnerability in HappyMonster Happy Ad…8.8
• CVE-2024-24834Improper Neutralization of Input During Web Page Generation …4.8
• CVE-2024-24835Missing Authorization vulnerability in realmag777 BEAR.This …6.5