github.comexploit
https://github.com/acmglz/bug1_report/blob/main/Record-Management-System-1.md CVE-2024-8136
MEDIUM
SourceCodester Record Management System sort1_user.php cross site scripting
Record summary
CVE-2024-8136 has a selected CVSS score of 5.3 (medium).
Description
A vulnerability, which was classified as problematic, was found in SourceCodester Record Management System 1.0. This affects an unknown part of the file sort1_user.php. The manipulation of the argument position leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 26, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Record Management SystemBrowse SourceCodester / Record Management SystemDefault status: unknown | CVE List | 1.0 | affected |
References
6nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-8136 VDB-275709 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.275709 VDB-275709 | SourceCodester Record Management System sort1_user.php cross site scriptingvdb entryTechnical description
https://vuldb.com/?id.275709 Submit #396486 | Sourcecodester Record Management System 1.0 XSSThird-party advisory
https://vuldb.com/?submit.396486 sourcecodester.comproduct
https://www.sourcecodester.com/