CVE-2024-0782: CodeAstro Online Railway Reservation System pass-profile.php cross site scripting
A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file pass-profile.php. The manipulation of the argument First Name/Last Name/User Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251698 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0782?
The CVE-2024-0782 vulnerability is classified as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2024-0782?
To fix CVE-2024-0782, ensure proper input validation and sanitization of user inputs in the pass-profile.php file.
Which versions are affected by CVE-2024-0782?
CVE-2024-0782 affects version 1.0 of the CodeAstro Online Railway Reservation System.
What type of vulnerability is CVE-2024-0782?
CVE-2024-0782 is a cross-site scripting (XSS) vulnerability.
What components of the system are vulnerable in CVE-2024-0782?
CVE-2024-0782 specifically affects the processing of First Name, Last Name, and User Name arguments in the pass-profile.php file.