CVE-2024-7815

MEDIUM

CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-7815 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.

Description

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-update-employee.php of the component Update Employee Page. The manipulation of the argument emp_fname /emp_lname /emp_nat_idno/emp_addr leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 15, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Online Railway Reservation System

Browse CodeAstro / Online Railway Reservation System

Default status: unknown

CVE List1.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBCodeAstro Online Railway Reservation System 1.0 - Cross Site Scripting (XSS)ExploitDB exploitby Raj NandiNot analyzed1 file
ExploitDB
PoC details

References

5
VDB-274711 | CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scriptingvdb entryTechnical description
https://vuldb.com/?id.274711