CVE-2024-40484: XSS
Published Aug 8, 2024
·Updated
A Reflected Cross Site Scripting (XSS) vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter.
Affected Software
1 affected component
Phpgurukul Old Age Home Management System=1.0
Event History
Aug 8, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Aug 12, 2024
Data Sourced
via NVD·01:38 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-40484?
CVE-2024-40484 is classified as a critical vulnerability due to its potential for remote code execution through reflected XSS.
2
How do I fix CVE-2024-40484?
To fix CVE-2024-40484, sanitize and validate all input parameters, specifically the 'searchdata' parameter in the '/oahms/search.php' file.
3
Who is affected by CVE-2024-40484?
CVE-2024-40484 affects users of the PHPGurukul Old Age Home Management System version 1.0.
4
What type of vulnerability is CVE-2024-40484?
CVE-2024-40484 is a reflected Cross Site Scripting (XSS) vulnerability.
5
Can CVE-2024-40484 be exploited without authentication?
Yes, CVE-2024-40484 can be exploited by unauthenticated remote attackers.