CVE-2024-10840

A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function of the file /Admin/akun_edit.php of the component Backend. The manipulation of the argument kode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Configurations

Configuration 1 (hide)

cpe:2.3:a:romadebrian:web-sekolah:1.0:*:*:*:*:*:*:*

History

06 Nov 2024, 22:49

Type Values Removed Values Added
References () https://github.com/2537463005/a/blob/main/WEB-Sekolah%E5%90%8E%E5%8F%B0%E5%AD%98%E5%82%A8%E5%9E%8Bxss.md - () https://github.com/2537463005/a/blob/main/WEB-Sekolah%E5%90%8E%E5%8F%B0%E5%AD%98%E5%82%A8%E5%9E%8Bxss.md - Exploit
References () https://vuldb.com/?ctiid.283086 - () https://vuldb.com/?ctiid.283086 - Permissions Required
References () https://vuldb.com/?id.283086 - () https://vuldb.com/?id.283086 - Third Party Advisory
Summary
  • (es) Se ha encontrado una vulnerabilidad clasificada como problemática en romadebrian WEB-Sekolah 1.0. Se trata de una función desconocida del archivo /Admin/akun_edit.php del componente Backend. La manipulación del argumento kode provoca ataques de Cross Site Scripting. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.
CVSS v2 : 3.3
v3 : 2.4
v2 : 3.3
v3 : 4.8
First Time Romadebrian
Romadebrian web-sekolah
CPE cpe:2.3:a:romadebrian:web-sekolah:1.0:*:*:*:*:*:*:*

05 Nov 2024, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-05 13:15

Updated : 2024-11-06 22:49


NVD link : CVE-2024-10840

Mitre link : CVE-2024-10840

CVE.ORG link : CVE-2024-10840


JSON object : View

Products Affected

romadebrian

  • web-sekolah
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-707

Improper Neutralization

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')