CVE-2024-34224

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters.
CVSS

No CVSS.

References
Link Resource
https://github.com/dovankha/CVE-2024-34224 Exploit Third Party Advisory
https://github.com/dovankha/CVE-2024-34224 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:oretnom23:computer_laboratory_management_system:1.0:*:*:*:*:*:*:*

History

16 Apr 2025, 18:47

Type Values Removed Values Added
First Time Oretnom23
Oretnom23 computer Laboratory Management System
CPE cpe:2.3:a:oretnom23:computer_laboratory_management_system:1.0:*:*:*:*:*:*:*
References () https://github.com/dovankha/CVE-2024-34224 - () https://github.com/dovankha/CVE-2024-34224 - Exploit, Third Party Advisory

14 May 2024, 16:12

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-14 15:38

Updated : 2025-04-16 18:47


NVD link : CVE-2024-34224

Mitre link : CVE-2024-34224


JSON object : View

Products Affected

oretnom23

  • computer_laboratory_management_system
CWE

No CWE.