CVE-2024-9799: SourceCodester Profile Registration without Reload Refresh add.php cross site scripting
First published: Thu Oct 10 2024(Updated: )
A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument email_address/address/company_name/job_title/jobDescriptionparameter leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rems Profile Registration Without Reload\/refresh | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-9799?
CVE-2024-9799 is classified as a problematic vulnerability affecting the SourceCodester Profile Registration without Reload Refresh 1.0.
How do I fix CVE-2024-9799?
To fix CVE-2024-9799, ensure that vulnerable parameters in add.php are validated and sanitized before use.
Which version of software is affected by CVE-2024-9799?
CVE-2024-9799 affects version 1.0 of SourceCodester Profile Registration without Reload Refresh.
What type of vulnerability is CVE-2024-9799?
CVE-2024-9799 involves manipulation of argument inputs, which could potentially lead to unauthorized actions.
Where is the vulnerable code located in CVE-2024-9799?
The vulnerability CVE-2024-9799 is found in the file add.php within the affected software.
- agent/title
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/trending
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/rems
- canonical/rems profile registration without reload\/refresh
- version/rems profile registration without reload\/refresh/1.0