CVE-2024-6954

21 Jul 2024

Título es

CVE-2024-6954

Dom, 21/07/2024 – 13:15

Tipo

CWE-79

Gravedad v2.0

4.00

Gravedad 2.0 Txt

MEDIUM

Título en

CVE-2024-6954

Descripción en

A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file sort1.php. The manipulation of the argument position leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272077 was assigned to this vulnerability.

21/07/2024

Vector CVSS:3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Vector CVSS:2.0

AV:N/AC:L/Au:S/C:N/I:P/A:N

Gravedad 3.1 (CVSS 3.1 Base Score)

3.50

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

LOW

Referencias

https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-11.md

https://vuldb.com/?ctiid_272077=