Lucene search
MitreCVE-2024-41333HistoryAug 06, 2024 - 4:15 p.m.
CVE-2024-41333
2024-08-0616:15:49
CWE-79
mitre
web.nvd.nist.gov
22
phpgurukul
tourism management
xss
vulnerability
cross-site scripting
arbitrary code
injection
uname parameter
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
22.4%
A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to execute arbitrary code in the context of a user’s browser via injecting a crafted payload into the uname parameter.
Affected configurations
Node
phpgurukultourism_management_systemMatch2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpgurukul | tourism_management_system | 2.0 | cpe:2.3:a:phpgurukul:tourism_management_system:2.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2024-41333
2024-08-06 16:15:49
packetstorm
packetstorm
Tourism Management System 2.0 Cross Site Scripting
2024-08-02 00:00:00
vulnrichment
vulnrichment
CVE-2024-41333
2024-08-06 00:00:00
cvelist
cvelist
CVE-2024-41333
2024-08-06 00:00:00
zdt
zdt
Tourism Management System 2.0 Cross Site Scripting Vulnerability
2024-08-07 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
22.4%
Related for CVE-2024-41333