CVE-2024-10701

A vulnerability was found in PHPGurukul Car Rental Portal 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Configurations

Configuration 1 (hide)

cpe:2.3:a:phpgurukul:car_rental_portal:1.0:*:*:*:*:*:*:*

History

05 Nov 2024, 16:52

Type Values Removed Values Added
Summary
  • (es) Se ha encontrado una vulnerabilidad en PHPGurukul Car Rental Portal 1.0. Se ha calificado como problemática. Este problema afecta a algunos procesos desconocidos del archivo /search.php. La manipulación del argumento searchdata provoca cross site scripting. El ataque puede iniciarse de forma remota. El exploit se ha hecho público y puede utilizarse.
First Time Phpgurukul car Rental Portal
Phpgurukul
CVSS v2 : 4.0
v3 : 3.5
v2 : 4.0
v3 : 6.1
References () https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Car%20Rental%20Portal%203.0%20-%20(search.php).md - () https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Car%20Rental%20Portal%203.0%20-%20(search.php).md - Exploit, Third Party Advisory
References () https://phpgurukul.com/ - () https://phpgurukul.com/ - Product
References () https://vuldb.com/?ctiid.282869 - () https://vuldb.com/?ctiid.282869 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.282869 - () https://vuldb.com/?id.282869 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.435179 - () https://vuldb.com/?submit.435179 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:phpgurukul:car_rental_portal:1.0:*:*:*:*:*:*:*

02 Nov 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-02 18:15

Updated : 2024-11-05 16:52


NVD link : CVE-2024-10701

Mitre link : CVE-2024-10701

CVE.ORG link : CVE-2024-10701


JSON object : View

Products Affected

phpgurukul

  • car_rental_portal
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')