CVE-2024-7814: CodeAstro Online Railway Reservation System Add Employee Page admin-add-employee.php cross site scripting

Published Aug 15, 2024

Updated

A vulnerability, which was classified as problematic, was found in CodeAstro Online Railway Reservation System 1.0. Affected is an unknown function of the file /admin/admin-add-employee.php of the component Add Employee Page. The manipulation of the argument empfname /emplname /empnatidno/empaddr leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Online Railway Reservation System Project Online Railway Reservation System=1.0

Event History

Aug 15, 2024

CVE Published

via MITRE·03:31 AM

Data Sourced

via MITRE·03:31 AM

DescriptionSeverityWeakness

Dec 31, 56605

Event

via FIRST·09:09 AM

Frequently Asked Questions

What is the severity of CVE-2024-7814?

CVE-2024-7814 is classified as problematic, indicating a significant security risk.

How do I fix CVE-2024-7814?

To fix CVE-2024-7814, ensure proper validation and sanitization of user inputs in the employee management module.

What component is affected by CVE-2024-7814?

CVE-2024-7814 affects the Add Employee Page component in the CodeAstro Online Railway Reservation System.

What version of the software is vulnerable to CVE-2024-7814?

Only version 1.0 of the Online Railway Reservation System is vulnerable to CVE-2024-7814.

What type of vulnerability is CVE-2024-7814?

CVE-2024-7814 is identified as a cross-site scripting (XSS) vulnerability.