Awaiting Analysis
CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

Products

Kashipara Music Management System

Source

cve@mitre.org

CVE-2024-42789 details

Published : Aug. 26, 2024, 3:15 p.m.
Last Modified : Aug. 26, 2024, 3:15 p.m.

Description

A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page" parameter.

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description

References

URL	Source
https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Music%20Management%20System%20v1.0/Reflected%20XSS%20-%20Controller.pdf	cve@mitre.org
https://www.kashipara.com/project/php/12978/music-management-system-in-php-php-project-source-code	cve@mitre.org

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-42789