CVE-2024-51106: XSS
A cross-site scripting (XSS) vulnerability in the component mcgs/admin/aboutus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the pagetitle parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51106?
CVE-2024-51106 is classified as a cross-site scripting (XSS) vulnerability, which can lead to significant security risks for affected systems.
How do I fix CVE-2024-51106?
To fix CVE-2024-51106, ensure proper input validation and sanitization for the pagetitle parameter in the mcgs/admin/aboutus.php component.
What systems are affected by CVE-2024-51106?
CVE-2024-51106 affects the PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0.
What type of attack can exploit CVE-2024-51106?
CVE-2024-51106 can be exploited through cross-site scripting, allowing attackers to inject and execute arbitrary scripts in the context of a user's browser.
How can I identify if CVE-2024-51106 is present in my system?
You can identify CVE-2024-51106 by checking if the pagetitle parameter in your PHPGURUKUL Medical Card Generation System allows unsanitized input in the mcgs/admin/aboutus.php page.