CVE-2024-5371: Kashipara College Management System submit_enroll_student.php cross site scripting
First published: Sun May 26 2024(Updated: )
A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. This affects an unknown part of the file submit_enroll_student.php. The manipulation of the argument class_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266283.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kashipara College Management System | ||
| Lopalopa College Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-5371?
CVE-2024-5371 is classified as a problematic vulnerability.
How does CVE-2024-5371 affect the application?
CVE-2024-5371 allows for cross site scripting due to improper handling of the class_name argument in the submit_enroll_student.php file.
Which software versions are affected by CVE-2024-5371?
CVE-2024-5371 affects Kashipara College Management System version 1.0 and Lopalopa College Management System version 1.0.
How can I mitigate CVE-2024-5371?
To mitigate CVE-2024-5371, ensure proper input validation and encoding of user inputs in the affected PHP file.
Is there a patch available for CVE-2024-5371?
As of now, there is no publicly available patch specifically addressing CVE-2024-5371.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- agent/event
- vendor/kashipara
- canonical/kashipara college management system
- vendor/lopalopa
- canonical/lopalopa college management system
- version/lopalopa college management system/1.0