CVE-2024-0189: RRJ Nueva Ecija Engineer Online Portal Create Message teacher_message.php cross site scripting

Published Jan 2, 2024

Updated

A vulnerability has been found in RRJ Nueva Ecija Engineer Online Portal 1.0 and classified as problematic. This vulnerability affects unknown code of the file teachermessage.php of the component Create Message Handler. The manipulation of the argument Content with the input </title><scRipt>alert(x)</scRipt> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249502 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

NIA RRJ Nueva Ecija Engineer Online Portal=1.0

Event History

Jan 2, 2024

CVE Published

06:00 PM

Data Sourced

06:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-0189?

CVE-2024-0189 is classified as problematic, indicating a potential for exploitation.

How do I fix CVE-2024-0189?

To mitigate CVE-2024-0189, it is recommended to update the RRJ Nueva Ecija Engineer Online Portal to the latest version or patch provided by the vendor.

What component is affected by CVE-2024-0189?

CVE-2024-0189 affects the Create Message Handler component within the teacher_message.php file.

What type of vulnerability is CVE-2024-0189?

CVE-2024-0189 involves manipulation of input arguments, potentially leading to unauthorized actions.

Which version of the software is vulnerable to CVE-2024-0189?

CVE-2024-0189 specifically affects version 1.0 of the RRJ Nueva Ecija Engineer Online Portal.