CVE-2024-3695: SourceCodester Computer Laboratory Management System Users.php cross site scripting

Published Apr 12, 2024

Updated

A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-260482 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

oretnom23 Computer Laboratory Management System=1.0

Sourcecodester Computer Laboratory Management System

Event History

Apr 12, 2024

CVE Published

via MITRE·03:31 PM

Data Sourced

via MITRE·03:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-3695?

CVE-2024-3695 is classified as a problematic vulnerability that could lead to cross-site scripting.

How do I fix CVE-2024-3695?

To mitigate CVE-2024-3695, ensure proper input validation and sanitization in the affected file /classes/Users.php.

What type of vulnerability is CVE-2024-3695?

CVE-2024-3695 is a cross-site scripting (XSS) vulnerability.

Which software is affected by CVE-2024-3695?

CVE-2024-3695 affects SourceCodester Computer Laboratory Management System version 1.0.

What component is vulnerable in CVE-2024-3695?

The vulnerable component identified in CVE-2024-3695 is the file /classes/Users.php.