CVE-2024-5368: Kashipara College Management System delete_faculty.php cross site scripting
First published: Sun May 26 2024(Updated: )
A vulnerability was found in Kashipara College Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file delete_faculty.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266280.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kashipara College Management System | ||
| Lopalopa College Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-5368?
CVE-2024-5368 is classified as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2024-5368?
To fix CVE-2024-5368, ensure proper input validation and sanitization in the delete_faculty.php file.
What systems are affected by CVE-2024-5368?
CVE-2024-5368 affects Kashipara College Management System version 1.0 and similar systems using the same vulnerable code.
Can CVE-2024-5368 be exploited remotely?
Yes, CVE-2024-5368 can be exploited remotely by manipulating the id argument in the delete_faculty.php file.
What type of vulnerability is CVE-2024-5368?
CVE-2024-5368 is a cross-site scripting (XSS) vulnerability that allows attackers to execute scripts in the context of a user's session.
- agent/references
- agent/weakness
- agent/title
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- agent/event
- vendor/kashipara
- canonical/kashipara college management system
- vendor/lopalopa
- canonical/lopalopa college management system
- version/lopalopa college management system/1.0