Cross-site Scripting Flaw in Sourcecodester Cab Management System
CVE-2024-51031

5.4MEDIUM

Key Information:

Vendor

Oretnom23

Status
Cab Management System
Vendor
CVE Published:
8 November 2024

What is CVE-2024-51031?

A Cross-site Scripting vulnerability exists in the manage_account.php file of Sourcecodester's Cab Management System version 1.0. This flaw allows remote authenticated users to insert arbitrary web scripts through the 'First Name,' 'Middle Name,' and 'Last Name' fields, potentially compromising the integrity and security of the application. Attackers may exploit this vulnerability to execute malicious scripts in the context of other users' sessions, leading to data theft or session hijacking.

References

https://www.sourcecodester.com/php/15180/cab-management-s...
https://github.com/vighneshnair7/CVE-2024-51031

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.