CVE-2024-2066

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255381 was assigned to this vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:remyandrade:computer_inventory_system:1.0:*:*:*:*:*:*:*

History

17 Dec 2024, 20:22

Type Values Removed Values Added
References () https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Computer%20Inventory%20System%20Using%20PHP/STORED%20XSS%20add-computer.php%20.md - () https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Computer%20Inventory%20System%20Using%20PHP/STORED%20XSS%20add-computer.php%20.md - Broken Link
References () https://vuldb.com/?ctiid.255381 - () https://vuldb.com/?ctiid.255381 - Permissions Required
References () https://vuldb.com/?id.255381 - () https://vuldb.com/?id.255381 - Permissions Required
CWE CWE-79
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.1
First Time Remyandrade computer Inventory System
Remyandrade
CPE cpe:2.3:a:remyandrade:computer_inventory_system:1.0:*:*:*:*:*:*:*

01 Mar 2024, 15:23

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-01 15:15

Updated : 2024-12-17 20:22


NVD link : CVE-2024-2066

Mitre link : CVE-2024-2066


JSON object : View

Products Affected

remyandrade

  • computer_inventory_system
CWE

No CWE.