CVE-2024-34224

HIGH
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-34224 has a selected CVSS score of 7.3 (high); EIP currently links 1 repository PoC.

Description

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 3, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

computer_laboratory_management_system

Browse sourcecodester / computer_laboratory_management_system

Default status: unknown

CVE List1.0affected

Proofs of concept

1

Repository PoCs

GitHubdovankha/CVE-2024-34224Repository PoCby dovankha0Not analyzed1 file

882 B

GitHub
PoC details

References

2