CVE-2024-2939: Campcodes Online Examination System updateExaminee.php cross site scripting
First published: Wed Mar 27 2024(Updated: )
A vulnerability classified as problematic has been found in Campcodes Online Examination System 1.0. Affected is an unknown function of the file /adminpanel/admin/facebox_modal/updateExaminee.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258030 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Campcodes Online Examination System | ||
| Campcodes Online Examination System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-2939?
CVE-2024-2939 has been classified as a problematic vulnerability.
How do I fix CVE-2024-2939?
To fix CVE-2024-2939, sanitize and validate user inputs in the affected file updateExaminee.php to prevent cross-site scripting.
What type of vulnerability is CVE-2024-2939?
CVE-2024-2939 is a cross-site scripting (XSS) vulnerability found in the Campcodes Online Examination System.
Which software versions are affected by CVE-2024-2939?
CVE-2024-2939 affects version 1.0 of the Campcodes Online Examination System.
Where in the code is CVE-2024-2939 located?
CVE-2024-2939 is located in the file /adminpanel/admin/facebox_modal/updateExaminee.php.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/epss
- collector/epss-latest
- source/FIRST
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/campcodes
- canonical/campcodes online examination system
- version/campcodes online examination system/1.0