CVE-2024-1871: SourceCodester Employee Management System Project Assignment Report assignp.php cross site scripting
First published: Sat Feb 24 2024(Updated: )
A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254694 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Employee Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-1871?
CVE-2024-1871 is classified as problematic, indicating a significant vulnerability that requires attention.
How do I fix CVE-2024-1871?
To fix CVE-2024-1871, sanitize and validate the 'pname' parameter in the affected file to prevent cross-site scripting.
Which version of the SourceCodester Employee Management System is affected by CVE-2024-1871?
CVE-2024-1871 affects version 1.0 of the SourceCodester Employee Management System.
What kind of vulnerability is CVE-2024-1871?
CVE-2024-1871 is a cross-site scripting (XSS) vulnerability affecting the Project Assignment Report component.
In which file can CVE-2024-1871 be found?
CVE-2024-1871 can be found in the file /process/assignp.php.
- agent/weakness
- agent/references
- agent/title
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/razormist
- canonical/employee management system
- version/employee management system/1.0