{"id":"CVE-2024-10371","aliases":["EUVD-2024-33068","GHSA-7g62-fhrq-8725"],"status":"published","title":"SourceCodester Payroll Management System main login buffer overflow","description":"A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used.","severity":{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00764,"percentile":0.55847,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2024-10-25T01:31:06Z","modified":"2026-06-17T06:55:30Z","products":[{"vendor":"itsourcecode","product":"payroll management system"},{"vendor":"razormist","product":"payroll_management_system"},{"vendor":"sourcecodester","product":"payroll management system"},{"vendor":"sourcecodester","product":"payroll_management_system"}],"references":[{"url":"https://vuldb.com/?id.281763","tags":["vdb-entry","technical-description","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.281763","tags":["signature","permissions-required","Permissions Required","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?submit.430175","tags":["third-party-advisory","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/CveSecLook/cve/issues/63","tags":["exploit","issue-tracking","Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://www.sourcecodester.com/","tags":["product","Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10371"},{"url":"https://www.sourcecodester.com"},{"url":"https://github.com/advisories/GHSA-7g62-fhrq-8725"}],"sources":{"cve":[{"id":"CVE-2024-10371","title":"SourceCodester Payroll Management System main login buffer overflow","description":"A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-10-25T01:31:06.51Z","modified":"2024-10-25T18:06:12.245Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:02.652467Z"}],"euvd":[{"id":"EUVD-2024-33068","description":"A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-10-25T01:31:06Z","modified":"2024-10-25T18:06:12Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-03T00:05:17.791345Z"}],"ghsa":[{"id":"GHSA-7g62-fhrq-8725","title":"A vulnerability classified as critical has been found in SourceCodester Payroll Management System...","description":"A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-10-25T03:31:32Z","modified":"2024-10-25T03:31:37Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:58:35.988972Z"}],"nvd":[{"id":"CVE-2024-10371","description":"A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used.","status":"published","published":"2024-10-25T02:15:03.28Z","modified":"2026-06-17T06:55:30.287Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:10:34.877798Z"}]}}