CVE-2024-34225: Code Injection

Published May 14, 2024

Updated

Cross Site Scripting vulnerability in php-lms/admin/?page=systeminfo in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the name, shortname parameters.

Affected Software

2 affected components

Computer Laboratory Management System Computer Laboratory Management System

oretnom23 Computer Laboratory Management System=1.0

Event History

Jan 1, 1970

CVE Published

via MITRE·12:00 AM

May 14, 2024

CVE Published

via NVD·03:38 PM

Aug 2, 2024

Data Sourced

via MITRE·02:54 AM

Description

Frequently Asked Questions

What is the severity of CVE-2024-34225?

CVE-2024-34225 is considered to have a high severity due to its potential for remote code execution via Cross Site Scripting.

How do I fix CVE-2024-34225?

To fix CVE-2024-34225, validate and sanitize user inputs for the name and shortname parameters to prevent script injection.

Who is affected by CVE-2024-34225?

CVE-2024-34225 affects users of the Computer Laboratory Management System version 1.0 that use the php-lms/admin/?page=system_info page.

What is the impact of CVE-2024-34225?

The impact of CVE-2024-34225 allows remote attackers to inject arbitrary web script or HTML, leading to security breaches.

Is CVE-2024-34225 easy to exploit?

Yes, CVE-2024-34225 can be easily exploited by attackers with basic knowledge of web application vulnerabilities.