CVE-2024-2939: Campcodes Online Examination System updateExaminee.php cross site scripting
A vulnerability classified as problematic has been found in Campcodes Online Examination System 1.0. Affected is an unknown function of the file /adminpanel/admin/faceboxmodal/updateExaminee.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258030 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2939?
CVE-2024-2939 has been classified as a problematic vulnerability.
How do I fix CVE-2024-2939?
To fix CVE-2024-2939, sanitize and validate user inputs in the affected file updateExaminee.php to prevent cross-site scripting.
What type of vulnerability is CVE-2024-2939?
CVE-2024-2939 is a cross-site scripting (XSS) vulnerability found in the Campcodes Online Examination System.
Which software versions are affected by CVE-2024-2939?
CVE-2024-2939 affects version 1.0 of the Campcodes Online Examination System.
Where in the code is CVE-2024-2939 located?
CVE-2024-2939 is located in the file /adminpanel/admin/facebox_modal/updateExaminee.php.