← Retour aux CVEs
CVE-2024-3531
LOW3.5
Description
A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability.
Details CVE
Score CVSS v3.13.5
SeveriteLOW
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisLOW
Interaction utilisateurREQUIRED
Publie4/10/2024
Derniere modification2/19/2025
Sourcenvd
Observations honeypot0
Produits affectes
campcodes:online_student_management_system
Faiblesses (CWE)
CWE-79
References
https://vuldb.com/?ctiid.259901(cna@vuldb.com)
https://vuldb.com/?id.259901(cna@vuldb.com)
https://vuldb.com/?submit.312522(cna@vuldb.com)
https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%204.pdf(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.259901(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.259901(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?submit.312522(af854a3a-2127-422b-91ae-364da2661108)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.