Lucene search
HistoryAug 12, 2024 - 1:38 p.m.
CVE-2024-40484
vulnerability
reflected xss
phpgurukul old age home management system
remote attackers
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.7%
A Reflected Cross Site Scripting (XSS) vulnerability was found in “/oahms/search.php” in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the “searchdata” parameter.
Affected configurations
Node
phpgurukulold_age_home_management_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpgurukul | old_age_home_management_system | 1.0 | cpe:2.3:a:phpgurukul:old_age_home_management_system:1.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-40484
2024-08-12 13:38:29
vulnrichment
vulnrichment
CVE-2024-40484
2024-08-08 00:00:00
cvelist
cvelist
CVE-2024-40484
2024-08-08 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2024-40484