CVE-2024-33985: Cross-Site Scripting (XSS) vulnerability in Janobe products

Published Aug 6, 2024

Updated

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/course/index.php'.

Affected Software

2 affected components

Janobe School Attendence Monitoring System=1.0

Janobe School Event Management System=1.0

Remediation

Information

There is no reported solution at this time.

Event History

Aug 6, 2024

CVE Published

via MITRE·01:02 PM

Data Sourced

via MITRE·01:02 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-33985?

CVE-2024-33985 has a high severity level due to its potential for exploitation via Cross-Site Scripting.

How do I fix CVE-2024-33985?

To fix CVE-2024-33985, update to a patched version of the affected software, if available.

Which software is affected by CVE-2024-33985?

CVE-2024-33985 affects Janobe School Attendance Monitoring System and Janobe School Event Management System, both version 1.0.

What type of vulnerability is CVE-2024-33985?

CVE-2024-33985 is a Cross-Site Scripting (XSS) vulnerability.

How can an attacker exploit CVE-2024-33985?

An attacker can exploit CVE-2024-33985 by crafting a malicious URL that captures a victim's session cookie.