Stored Cross-Site Scripting Flaw in Phpgurukul Vehicle Record Management System
CVE-2024-51223

4.8MEDIUM

Key Information:

Vendor

Phpgurukul
Status
Vehicle Record Management System
Vendor
CVE Published:
23 March 2026

What is CVE-2024-51223?

A stored cross-site scripting (XSS) vulnerability exists in the Phpgurukul Vehicle Record Management System version 1.0. This flaw enables attackers to inject malicious scripts via the Mobile Number parameter on the /admin/profile.php page. By exploiting this vulnerability, an attacker can execute arbitrary web scripts or HTML, potentially leading to unauthorized actions or data theft. Users of this system should take immediate steps to apply updates or mitigations to safeguard against these types of attacks.

References

https://github.com/Buckdray/vulnerability-research
https://github.com/Buckdray/vulnerability-research/tree/m...

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.