CVE-2024-4644 - SourceCodester Prison Management System changepassword.php cross site scripting

Back Back to CVE browser

MEDIUM

SourceCodester Prison Management System changepassword.php cross site scripting

Published May 8, 2024

5.4

MEDIUM

CVSS 3.1

EPSS 0.51%

Description

A vulnerability has been found in SourceCodester Prison Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /Employee/changepassword.php. The manipulation of the argument txtold_password/txtnew_password/txtconfirm_password leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263488.

Affected products

Vendor SourceCodester Product Prison Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Prison Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-44247
Advisory
https://github.com/yylmm/CVE/blob/main/Prison%20Management%20System/xss3.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.263488
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.263488
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.330021
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-44247		Advisory
https://github.com/yylmm/CVE/blob/main/Prison%20Management%20System/xss3.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.263488		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.263488		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.330021		third-party-advisoryThird Party AdvisoryVDB Entry