CVE-2024-8563: SourceCodester PHP CRUD update.php cross site scripting

Published Sep 7, 2024

Updated

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/update.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

rems Php Crud=1.0

Remediation

Patch Available

https://vuldb.com/?id.276783

Event History

Sep 7, 2024

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionSeverityWeakness

Apr 25, 56770

Event

via FIRST·05:02 PM

Frequently Asked Questions

What is the severity of CVE-2024-8563?

CVE-2024-8563 is classified as problematic due to its potential to enable cross-site scripting attacks.

How do I fix CVE-2024-8563?

To fix CVE-2024-8563, ensure proper sanitization and validation of user input in the update.php file.

What impact does CVE-2024-8563 have on the software?

CVE-2024-8563 allows attackers to exploit the vulnerability by injecting malicious scripts, which can compromise user data.

Which software is affected by CVE-2024-8563?

CVE-2024-8563 affects SourceCodester PHP CRUD version 1.0.

In which file is CVE-2024-8563 located?

CVE-2024-8563 is located in the /endpoint/update.php file.