Lucene search
HistoryAug 12, 2024 - 1:38 p.m.
CVE-2024-40481
stored xss
phpgurukul
old age home management system
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.6%
A Stored Cross Site Scripting (XSS) vulnerability was found in “/admin/view-enquiry.php” in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the Contact Us page “message” parameter.
Affected configurations
Node
phpgurukulold_age_home_management_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpgurukul | old_age_home_management_system | 1.0 | cpe:2.3:a:phpgurukul:old_age_home_management_system:1.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-40481
2024-08-12 13:38:29
cvelist
cvelist
CVE-2024-40481
2024-08-08 00:00:00
vulnrichment
vulnrichment
CVE-2024-40481
2024-08-08 00:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.6%
Related for NVD:CVE-2024-40481