CVE-2024-51180 in IFSC Code Finder Project

摘要

由 MITRE • 2024-10-29

A Reflected Cross Site Scripting (XSS) vulnerability was found in /ifscfinder/index.php in PHPGurukul IFSC Code Finder Project v1.0, which allows remote attackers to execute arbitrary code via the "searchifsccode" parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 负责: MITRE
• 预定: 2024-10-28
• 披露: 2024-10-29
• 管理: 已接受
• 条目: VDB-282388
• CPE: 准备好
• CWE: CWE-79 (已确认)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00435
• KEV: 否
• 活动: 非常低
• 部门: Police, Education, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-51180
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-51180
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-51180/