Lucene search
HistoryFeb 01, 2024 - 8:50 p.m.
CVE-2024-24041
cve-2024-24041
php
mysql
web scripts
crafted payload
location parameter
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.0%
A stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the location parameter at /travel-journal/write-journal.php.
Affected configurations
Node
remyandradetravel_journal_using_php_and_mysql_with_source_codeMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| remyandrade | travel_journal_using_php_and_mysql_with_source_code | 1.0 | cpe:2.3:a:remyandrade:travel_journal_using_php_and_mysql_with_source_code:1.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-24041
2024-02-01 20:50:05
prion
prion
Cross site scripting
2024-02-01 20:50:00
cvelist
cvelist
CVE-2024-24041
2024-02-01 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.0%
Related for NVD:CVE-2024-24041