Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-33987

Опубликовано: 06 авг. 2024
Источник: nvd
CVSS3: 7.1
CVSS3: 6.1
EPSS Низкий

Описание

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate', 'YearLevel', 'eventdate', 'events', 'Users' and 'YearLevel' parameters in '/report/index.php'.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:janobe:school_attendence_monitoring_system:1.0:*:*:*:*:*:*:*
cpe:2.3:a:janobe:school_event_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00094
Низкий

7.1 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

github логотип

GHSA-g9cm-cgc6-5pfc

CVSS3: 7.1
github
больше 1 года назад

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate', 'YearLevel', 'eventdate', 'events', 'Users' and 'YearLevel' parameters in '/report/index.php'.

EPSS

Процентиль: 27%
0.00094
Низкий

7.1 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79