CVE-2024-12932

Summary

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file addSizeController.php. The manipulation of the argument size leads to cross site scripting. The attack can be launched remotely.

Affected Software

Weaknesses

• CWE-79: Cross Site Scripting
• CWE-94: Code Injection

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://code-projects.org/simple-admin-panel-in-php-with-source-code/

References

• https://vuldb.com/?id.289285
• https://vuldb.com/?ctiid.289285
• https://vuldb.com/?submit.468123
• https://code-projects.org/

• ←Previous
• Next→