CVE-2024-7218

Summary

A flaw has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected is an unknown function of the file /admin/ajax.php?action=save_student. Executing manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.

Affected Software

Weaknesses

• CWE-79: Cross Site Scripting
• CWE-94: Code Injection

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://vuldb.com/?id.272789
• https://vuldb.com/?ctiid.272789
• https://vuldb.com/?submit.380425
• https://gist.github.com/topsky979/86480890cc621c240c86e95a3de9ecc4

References

• https://vuldb.com/?id.272789
• https://vuldb.com/?ctiid.272789
• https://vuldb.com/?submit.380425
• https://gist.github.com/topsky979/86480890cc621c240c86e95a3de9ecc4

• ←Previous
• Next→