← Zuruck zu CVEs
CVE-2024-3531
LOW3.5
Beschreibung
A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability.
CVE Details
CVSS v3.1 Bewertung3.5
SchweregradLOW
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienLOW
BenutzerinteraktionREQUIRED
Veroffentlicht4/10/2024
Zuletzt geandert2/19/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
campcodes:online_student_management_system
Schwachen (CWE)
CWE-79
Referenzen
https://vuldb.com/?ctiid.259901(cna@vuldb.com)
https://vuldb.com/?id.259901(cna@vuldb.com)
https://vuldb.com/?submit.312522(cna@vuldb.com)
https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%204.pdf(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.259901(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.259901(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?submit.312522(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.