Lucene search

VulDBCVE-2024-7929

HistoryAug 19, 2024 - 10:15 p.m.

CVE-2024-7929

2024-08-1922:15:06

CWE-79

VulDB

web.nvd.nist.gov

sourcecodester simple forum website

remote attack

cross site scripting

/registration.php

username argument

cve-2024-7929

disclosed vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS4

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/VI:L/SI:N/VA:N/SA:N

EPSS

0.001

Percentile

25.8%

JSON

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects an unknown part of the file /registration.php of the component Signup Page. The manipulation of the argument username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

oretnom23simple_forum_websiteMatch1.0

VendorProductVersionCPE
oretnom23simple_forum_website1.0cpe:2.3:a:oretnom23:simple_forum_website:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oretnom23	simple_forum_website	1.0	cpe:2.3:a:oretnom23:simple_forum_website:1.0:::::::*

CNA Affected

[
  {
    "vendor": "SourceCodester",
    "product": "Simple Forum Website",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Signup Page"
    ]
  }
]

References

github.com/ulayaha/ulayaha.github.io/issues/2

vuldb.com/?ctiid.275115

vuldb.com/?id.275115

vuldb.com/?submit.392325

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS4

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/VI:L/SI:N/VA:N/SA:N

EPSS

0.001

Percentile

25.8%

JSON

Related for CVE-2024-7929