Cross-Site Scripting Vulnerability in PHPGurukul Land Record System
CVE-2024-13081

5.3MEDIUM

Key Information:

Vendor
PHPgurukul
Status
Land Record System
Vendor
CVE Published:
31 December 2024

Summary

A significant security vulnerability is identified in the PHPGurukul Land Record System version 1.0, specifically affecting the /admin/contactus.php file. This flaw enables cross-site scripting (XSS) through improper handling of the Page Description argument, allowing attackers to execute malicious scripts in the context of an affected user's session. Remote attackers can exploit this vulnerability to manipulate web content, potentially compromising user data, or impersonating legitimate users. The public disclosure of this vulnerability heightens the urgency for affected users to apply appropriate security measures.

Affected Version(s)

Land Record System 1.0

References

https://vuldb.com/?id.289834
vdb-entrytechnical-description
https://vuldb.com/?ctiid.289834
signaturepermissions-required
https://vuldb.com/?submit.472192
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database

Credit

Fergod (VulDB User)
.