CVE-2024-33987

NVD Published Date: August 06, 2024 at 01:15 PM
NVD Last Modified: August 15, 2024 at 04:57 PM
Download Patch
Vulnerability ID
CVE-2024-33987
Severity
MEDIUM
Severity Score
6.1
Summary
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate', 'YearLevel', 'eventdate', 'events', 'Users' and 'YearLevel' parameters in '/report/index.php'.
References
Mitigation and Patches
-
Exploits
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE ID
CWE-79

Recent Publish

2024-07 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5040442)

2024-07 Cumulative Update for Windows 11 Version 23H2 for arm64-based Systems (KB5040442)

2024-07 Cumulative Update for Windows 11 Version 23H2 for x64-based Systems (KB5040442)

2024-07 Cumulative Update for Windows 11 Version 22H2 for arm64-based Systems (KB5040442)

2024-07 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5040448)

2024-07 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB5040448)

See SecOps Solution
in action

Schedule Demo
Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions
hello@secopsolution.com
+569-231-213
Compare
Qualys Cloud Agent Tenable Nessus Rapid7 InsightVM
Company
About Us Contact Career
Resources
CVE Windows KB Case Studies eBooks Policy Templates Blog Webinar
Try It
Patch Astra EPSS Calculator Contact Free Scan Schedule Demo Log In
© 2024  SecOps Solution, Inc.| Privacy Policy | Terms and Conditions .
Social Media :