CVE-2024-3531 - Campcodes Complete Online Student Management System courses_view.php cross site scripting

Back Back to CVE browser

MEDIUM

Campcodes Complete Online Student Management System courses_view.php cross site scripting

Published Apr 10, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.64%

Description

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability.

Affected products

Vendor Campcodes Product Complete Online Student Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Campcodes

Complete Online Student Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%204.pdf
exploit
https://vuldb.com/?ctiid.259901
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.259901
vdb-entrytechnical-descriptionPermissions RequiredVDB Entry
https://vuldb.com/?submit.312522
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%204.pdf		exploit
https://vuldb.com/?ctiid.259901		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.259901		vdb-entrytechnical-descriptionPermissions RequiredVDB Entry
https://vuldb.com/?submit.312522		third-party-advisoryThird Party AdvisoryVDB Entry