CVE-2024-33982: Cross-Site Scripting (XSS) vulnerability in Janobe products

Published Aug 6, 2024

Updated

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'StudentID' parameter in '/AttendanceMonitoring/student/controller.php'.

Affected Software

2 affected components

Janobe School Attendence Monitoring System=1.0

Janobe School Event Management System=1.0

Remediation

Information

There is no reported solution at this time.

Event History

Aug 6, 2024

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-33982?

CVE-2024-33982 is classified as a high severity Cross-Site Scripting (XSS) vulnerability.

How do I fix CVE-2024-33982?

To fix CVE-2024-33982, ensure you update the vulnerable Janobe software to the latest version that addresses this vulnerability.

What systems are affected by CVE-2024-33982?

CVE-2024-33982 affects version 1.0 of the Janobe School Attendance Monitoring System and the School Event Management System.

What is the nature of the vulnerability in CVE-2024-33982?

CVE-2024-33982 is a Cross-Site Scripting (XSS) vulnerability that allows attackers to exploit session cookies through specially crafted URLs.

Can CVE-2024-33982 lead to unauthorized access?

Yes, CVE-2024-33982 can allow attackers to obtain sensitive session information, potentially leading to unauthorized access.