CVE-2024-48279: Code Injection
A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary HTML code via the searchkey parameter in a POST HTTP request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48279?
CVE-2024-48279 is considered a high-severity vulnerability due to its potential for remote code execution through HTML injection.
How do I fix CVE-2024-48279?
To mitigate CVE-2024-48279, sanitize and validate the input of the 'searchkey' parameter to prevent HTML code injection.
Who is affected by CVE-2024-48279?
CVE-2024-48279 affects users of PHPGurukul User Registration & Login and User Management System version 3.2.
What kind of attacks can be performed using CVE-2024-48279?
Attackers can exploit CVE-2024-48279 to execute arbitrary HTML or JavaScript code in the context of the targeted user's browser.
Is there a patch available for CVE-2024-48279?
As of now, no official patch has been released for CVE-2024-48279, and users should apply the suggested mitigations.