CVE-2024-1822

A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254610 is the identifier assigned to this vulnerability.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:phpgurukul:tourism_management_system:1.0:*:*:*:*:*:*:*

History

06 Dec 2024, 19:58

Type Values Removed Values Added
CPE cpe:2.3:a:phpgurukul:tourism_management_system:1.0:*:*:*:*:*:*:*
CWE CWE-79
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.1
First Time Phpgurukul tourism Management System
Phpgurukul
References () https://drive.google.com/file/d/1ulzFlRqsex39dDUOFU2LbmphrQblSAwn/view?usp=drive_link - () https://drive.google.com/file/d/1ulzFlRqsex39dDUOFU2LbmphrQblSAwn/view?usp=drive_link - Permissions Required
References () https://vuldb.com/?id.254610 - () https://vuldb.com/?id.254610 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.254610 - () https://vuldb.com/?ctiid.254610 - Permissions Required, VDB Entry

23 Feb 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-23 16:15

Updated : 2024-12-06 19:58


NVD link : CVE-2024-1822

Mitre link : CVE-2024-1822


JSON object : View

Products Affected

phpgurukul

  • tourism_management_system
CWE

No CWE.