PT-2024-39100 · Sourcecodester · Sourcecodester Php Crud

Delvy · Published 2024-09-07 · Updated 2024-09-10 · CVE-2024-8563

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP CRUD version 1.0

Description: A vulnerability was found in the software, classified as problematic. It affects the file /endpoint/update.php, where the manipulation of the first name, middle name, and last name arguments leads to cross-site scripting. The attack can be initiated remotely.

Recommendations: For version 1.0, consider disabling the update functionality in the /endpoint/update.php file until a patch is available. Restrict access to the first name, middle name, and last name arguments in the affected endpoint to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-8563

Affected Products

Sourcecodester Php Crud

References · 11

• 🔥 https://vuldb.com/?submit.403661 · Exploit
• https://vuldb.com/?id.276783 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-8563 · Security Note
• https://osv.dev/vulnerability/CVE-2024-8563 · Vendor Advisory
• https://twitter.com/CVEnew/status/1832513007298978225 · Twitter Post
• https://t.me/cvenotify/93715 · Telegram Post
• https://t.me/cvenotify/94002 · Telegram Post
• https://t.me/cvedetector/5059 · Telegram Post
• https://sourcecodester.com · Note
• https://vuldb.com/?ctiid.276783 · Note
• https://twitter.com/VulmonFeeds/status/1832549105526083846 · Twitter Post