CVE-2024-1822

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-1822
A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254610 is the identifier assigned to this vulnerability.

2.4 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

3.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:L/Au:M/C:N/I:P/A:N

Exploitability : 6.4 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication MULTIPLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://drive.google.com/file/d/1ulzFlRqsex39dDUOFU2LbmphrQblSAwn/view?usp=drive_link Permissions Required
https://vuldb.com/?ctiid.254610 Permissions Required VDB Entry
https://vuldb.com/?id.254610 Third Party Advisory VDB Entry
https://drive.google.com/file/d/1ulzFlRqsex39dDUOFU2LbmphrQblSAwn/view?usp=drive_link Permissions Required
https://vuldb.com/?ctiid.254610 Permissions Required VDB Entry
https://vuldb.com/?id.254610 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:phpgurukul:tourism_management_system:1.0:*:*:*:*:*:*:*
History

06 Dec 2024, 19:58

Type Values Removed Values Added
First Time Phpgurukul tourism Management System
Phpgurukul
References () https://drive.google.com/file/d/1ulzFlRqsex39dDUOFU2LbmphrQblSAwn/view?usp=drive_link - () https://drive.google.com/file/d/1ulzFlRqsex39dDUOFU2LbmphrQblSAwn/view?usp=drive_link - Permissions Required
References () https://vuldb.com/?ctiid.254610 - () https://vuldb.com/?ctiid.254610 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.254610 - () https://vuldb.com/?id.254610 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:phpgurukul:tourism_management_system:1.0:*:*:*:*:*:*:*

21 Nov 2024, 08:51

Type Values Removed Values Added
References () https://drive.google.com/file/d/1ulzFlRqsex39dDUOFU2LbmphrQblSAwn/view?usp=drive_link - () https://drive.google.com/file/d/1ulzFlRqsex39dDUOFU2LbmphrQblSAwn/view?usp=drive_link -
References () https://vuldb.com/?ctiid.254610 - () https://vuldb.com/?ctiid.254610 -
References () https://vuldb.com/?id.254610 - () https://vuldb.com/?id.254610 -

29 Feb 2024, 01:43

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad ha sido encontrada en PHPGurukul Tourism Management System 1.0 y clasificada como problemática. Una función desconocida del archivo user-bookings.php es afectada por esta vulnerabilidad. La manipulación del argumento Nombre completo conduce a cross site scripting. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-254610 es el identificador asignado a esta vulnerabilidad.

23 Feb 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-23 16:15

Updated : 2024-12-06 19:58

NVD link : CVE-2024-1822

Mitre link : CVE-2024-1822

CVE.ORG link : CVE-2024-1822

JSON object : View

Products Affected

phpgurukul

  • tourism_management_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')