CVE-2024-33983: Cross-Site Scripting (XSS) vulnerability in Janobe products

Published Aug 6, 2024

Updated

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and 'YearLevel' parameters in '/AttendanceMonitoring/report/attendanceprint.php'.

Affected Software

2 affected components

Janobe School Attendence Monitoring System=1.0

Janobe School Event Management System=1.0

Remediation

Information

There is no reported solution at this time.

Event History

Aug 6, 2024

CVE Published

via MITRE·01:01 PM

Data Sourced

via MITRE·01:01 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-33983?

CVE-2024-33983 is classified as a critical Cross-Site Scripting (XSS) vulnerability.

How do I fix CVE-2024-33983?

To fix CVE-2024-33983, update the affected Janobe School Attendance Monitoring System and School Event Management System to a patched version provided by the vendor.

Which versions are affected by CVE-2024-33983?

CVE-2024-33983 affects version 1.0 of both the Janobe School Attendance Monitoring System and the Janobe School Event Management System.

What does CVE-2024-33983 exploit?

CVE-2024-33983 exploits Cross-Site Scripting (XSS) vulnerabilities that allow an attacker to obtain session cookies from victims.

Who is impacted by CVE-2024-33983?

Users and administrators of the Janobe School Attendance Monitoring System and Janobe School Event Management System version 1.0 are impacted by CVE-2024-33983.