CVE-2024-9952: SourceCodester Online Eyewear Shop Contact Information Page contact_info cross site scripting
First published: Tue Oct 15 2024(Updated: )
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=system_info/contact_info of the component Contact Information Page. The manipulation of the argument Address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Online Eyewear Shop | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-9952?
The severity of CVE-2024-9952 is classified as problematic, indicating a potential impact on the affected system.
How do I fix CVE-2024-9952?
To fix CVE-2024-9952, you should apply any available patches for SourceCodester Online Eyewear Shop version 1.0 or implement security controls to mitigate the vulnerability.
What component is affected by CVE-2024-9952?
CVE-2024-9952 affects the Contact Information Page component of the SourceCodester Online Eyewear Shop.
What file is associated with CVE-2024-9952?
CVE-2024-9952 is associated with the file /admin/?page=system_info/contact_info.
What type of manipulation does CVE-2024-9952 involve?
CVE-2024-9952 involves the manipulation of the argument Address.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/trending
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oretnom23
- canonical/sourcecodester online eyewear shop
- version/sourcecodester online eyewear shop/1.0