CVE-2024-12998: code-projects Online Car Rental System GET Parameter index.php cross site scripting
First published: Sat Dec 28 2024(Updated: )
A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| code-projects Online Car Rental System | ||
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability associated with CVE-2024-12998?
CVE-2024-12998 describes a cross-site scripting vulnerability found in the GET Parameter Handler of the Online Car Rental System 1.0.
How does CVE-2024-12998 affect the Online Car Rental System?
CVE-2024-12998 allows an attacker to manipulate input and execute malicious scripts in the user's browser.
What are the potential risks of CVE-2024-12998?
The risks include session hijacking, data theft, or executing arbitrary scripts on affected users' browsers.
How can I fix CVE-2024-12998 in the Online Car Rental System?
To fix CVE-2024-12998, you should sanitize and validate all user inputs within the GET Parameter Handler to prevent script injection.
What versions of Online Car Rental System are affected by CVE-2024-12998?
CVE-2024-12998 affects Online Car Rental System version 1.0.
- agent/title
- agent/weakness
- agent/type
- agent/references
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/code-projects
- canonical/code-projects online car rental system
- vendor/fabianros