CVE-2024-1031

A vulnerability was found in CodeAstro Expense Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file templates/5-Add-Expenses.php of the component Add Expenses Page. The manipulation of the argument item leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252304.
References
Link Resource
https://docs.qq.com/doc/DYmhqV3piekZ5dlZi Permissions Required
https://vuldb.com/?ctiid.252304 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.252304 Third Party Advisory VDB Entry
https://docs.qq.com/doc/DYmhqV3piekZ5dlZi Permissions Required
https://vuldb.com/?ctiid.252304 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.252304 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:oretnom23:expense_management_system:1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 08:49

Type Values Removed Values Added
CVSS v2 : 4.0
v3 : 6.1
v2 : 4.0
v3 : 3.5
References () https://docs.qq.com/doc/DYmhqV3piekZ5dlZi - Permissions Required () https://docs.qq.com/doc/DYmhqV3piekZ5dlZi - Permissions Required
References () https://vuldb.com/?ctiid.252304 - Permissions Required, Third Party Advisory, VDB Entry () https://vuldb.com/?ctiid.252304 - Permissions Required, Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.252304 - Third Party Advisory, VDB Entry () https://vuldb.com/?id.252304 - Third Party Advisory, VDB Entry

05 Feb 2024, 20:43

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.1
CPE cpe:2.3:a:oretnom23:expense_management_system:1.0:*:*:*:*:*:*:*
References () https://vuldb.com/?id.252304 - () https://vuldb.com/?id.252304 - Third Party Advisory, VDB Entry
References () https://docs.qq.com/doc/DYmhqV3piekZ5dlZi - () https://docs.qq.com/doc/DYmhqV3piekZ5dlZi - Permissions Required
References () https://vuldb.com/?ctiid.252304 - () https://vuldb.com/?ctiid.252304 - Permissions Required, Third Party Advisory, VDB Entry
First Time Oretnom23
Oretnom23 expense Management System

30 Jan 2024, 14:18

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-30 13:15

Updated : 2024-11-21 08:49


NVD link : CVE-2024-1031

Mitre link : CVE-2024-1031

CVE.ORG link : CVE-2024-1031


JSON object : View

Products Affected

oretnom23

  • expense_management_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')