CVE-2024-30989: XSS
Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30989?
CVE-2024-30989 has a high severity rating due to the potential for attackers to execute arbitrary code.
How do I fix CVE-2024-30989?
Fix CVE-2024-30989 by sanitizing the input parameters 'cname', 'comname', 'state', and 'city' to prevent cross-site scripting.
Which software is affected by CVE-2024-30989?
CVE-2024-30989 affects the phpgurukul Client Management System version 1.1.
Can CVE-2024-30989 lead to data breaches?
Yes, if exploited, CVE-2024-30989 can lead to unauthorized access and potential data breaches.
How can I detect if my system is vulnerable to CVE-2024-30989?
You can detect vulnerability to CVE-2024-30989 by testing inputs in the 'edit-client-details.php' page for proper sanitization and validation.