Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

SourceCodester Student Study Center Desk Management System

Source

cna@vuldb.com

CVE-2024-6807 details

Published : July 17, 2024, 4:15 a.m.
Last Modified : July 17, 2024, 1:34 p.m.

Description

A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sscdms/classes/Users.php?f=save of the component HTTP POST Request Handler. The manipulation of the argument firstname/middlename/lastname/username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271706 is the identifier assigned to this vulnerability.

CVSS Score

1	2.4	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact