CVE-2024-6907: SourceCodester Record Management System sort.php cross site scripting
A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file sort.php. The manipulation of the argument sort leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271932.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6907?
CVE-2024-6907 has been classified as problematic, indicating a significant security risk.
How does CVE-2024-6907 exploit cross site scripting?
CVE-2024-6907 exploits cross site scripting through manipulation of the 'sort' argument in the sort.php file.
Which software versions are affected by CVE-2024-6907?
CVE-2024-6907 affects SourceCodester Record Management System version 1.0.
Can CVE-2024-6907 be exploited remotely?
Yes, CVE-2024-6907 can be exploited remotely, allowing attackers to launch XSS attacks.
How can I mitigate the risks associated with CVE-2024-6907?
To mitigate CVE-2024-6907, ensure to sanitize and validate the input in the sort.php file to prevent cross site scripting.