Security Advisory
CVE-2024-6880
N/A
UNKNOWN
Vulnerability Description
During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms.
Publicly available source code of "/registered.php" discloses that path, allowing an attacker to attempt further attacks.
This issue affects MegaBIP software versions below 5.15
Published Date
January 10, 2025
Official Source
NIST NVD Advisory