CVE-2024-3365: SourceCodester Online Library System controller.php cross site scripting
A vulnerability was found in SourceCodester Online Library System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin/users/controller.php. The manipulation of the argument username leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259469 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3365?
CVE-2024-3365 has been rated as problematic due to its potential for cross site scripting attacks.
How does CVE-2024-3365 affect the Online Library System?
CVE-2024-3365 affects the file admin/users/controller.php and can allow an attacker to manipulate the user_name argument.
How do I fix CVE-2024-3365?
To fix CVE-2024-3365, sanitize user inputs and implement proper output encoding to prevent cross site scripting.
What is the primary attack vector for CVE-2024-3365?
The primary attack vector for CVE-2024-3365 is through the manipulation of the user_name parameter in web requests.
Are there known exploits for CVE-2024-3365?
As of now, there are no publicly known exploits reported for CVE-2024-3365.