PT-2024-38508 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System
Samwbs
·
Published
2024-08-11
·
Updated
2024-08-20
·
CVE-2024-7686
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SourceCodester Kortex Lite Advocate Office Management System version 1.0
Description
A vulnerability was found in the SourceCodester Kortex Lite Advocate Office Management System, affecting an unknown part of the file
register case.php. The manipulation of the arguments title, description, and opposite lawyer leads to cross-site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.Recommendations
As a temporary workaround, consider disabling the manipulation of the
title, description, and opposite lawyer arguments in the register case.php file until a patch is available. Restrict access to the register case.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sourcecodester Kortex Lite Advocate Office Management System