code-projects Simple Admin Panel 1.0 updateItemController.php p_name/p_desc Cross Site Scripting

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a code-projects Simple Admin Panel 1.0. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil updateItemController.php, a cikin sashi $software_component. Wuro manipulation of the argument p_name/p_desc ga Cross Site Scripting. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-79. Lalle, rauni an sanar da shi 12/25/2024. Ana kiran wannan rauni da CVE-2024-12933. Ngam yiɗi ka a tuma ndiyam ka nder layi. Bayani na fasaha ga. Babu wani exploit da ake da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á yí a wondi feere. 0-day ga, an ndiyam a wuro be $0-$5k. If you want to get best quality of vulnerability data, you may have to visit VulDB.

3 Goyarwa · 84 Datenpunkte

FurɗeSúgá
12/25/2024 16:09		Gargadi 1/2
12/26/2024 05:31		Gargadi 2/2
02/16/2025 18:14
software_vendorcode-projectscode-projectscode-projects
software_nameSimple Admin PanelSimple Admin PanelSimple Admin Panel
software_version1.01.01.0
software_fileupdateItemController.phpupdateItemController.phpupdateItemController.php
software_argumentp_name/p_descp_name/p_descp_name/p_desc
vulnerability_cweCWE-79 (Cross Site Scripting)CWE-79 (Cross Site Scripting)CWE-79 (Cross Site Scripting)
vulnerability_risk111
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_uiRRR
cvss3_vuldb_sUUU
cvss3_vuldb_cNNN
cvss3_vuldb_iLLL
cvss3_vuldb_aNNN
source_cveCVE-2024-12933CVE-2024-12933CVE-2024-12933
cna_responsibleVulDBVulDBVulDB
software_typeProject Management SoftwareProject Management SoftwareProject Management Software
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_ciNNN
cvss2_vuldb_iiPPP
cvss2_vuldb_aiNNN
cvss4_vuldb_avNNN
cvss4_vuldb_acLLL
cvss4_vuldb_vcNNN
cvss4_vuldb_viLLL
cvss4_vuldb_vaNNN
cvss2_vuldb_auSSS
cvss2_vuldb_eNDNDND
cvss2_vuldb_rlNDNDND
cvss2_vuldb_rcNDNDND
cvss3_vuldb_prLLL
cvss3_vuldb_eXXX
cvss3_vuldb_rlXXX
cvss3_vuldb_rcXXX
cvss4_vuldb_atNNN
cvss4_vuldb_prLLL
cvss4_vuldb_uiNNP
cvss4_vuldb_scNNN
cvss4_vuldb_siNNN
cvss4_vuldb_saNNN
cvss4_vuldb_eXXX
cvss2_vuldb_basescore4.04.04.0
cvss2_vuldb_tempscore4.04.04.0
cvss3_vuldb_basescore3.53.53.5
cvss3_vuldb_tempscore3.53.53.5
cvss3_meta_basescore3.53.53.5
cvss3_meta_tempscore3.53.53.5
cvss4_vuldb_bscore5.35.35.1
cvss4_vuldb_btscore5.35.35.1
advisory_date1735081200 (12/25/2024)1735081200 (12/25/2024)1735081200 (12/25/2024)
price_0day$0-$5k$0-$5k$0-$5k
cve_nvd_summaryA vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument p_name/p_desc leads to cross site scripting. The attack may be launched remotely.A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument p_name/p_desc leads to cross site scripting. The attack may be launched remotely.
cvss4_cna_avNN
cvss4_cna_acLL
cvss4_cna_atNN
cvss4_cna_prLL
cvss4_cna_uiNN
cvss4_cna_vcNN
cvss4_cna_viLL
cvss4_cna_vaNN
cvss4_cna_scNN
cvss4_cna_siNN
cvss4_cna_saNN
cvss4_cna_bscore5.35.3
cvss3_cna_avNN
cvss3_cna_acLL
cvss3_cna_prLL
cvss3_cna_uiRR
cvss3_cna_sUU
cvss3_cna_cNN
cvss3_cna_iLL
cvss3_cna_aNN
cvss3_cna_basescore3.53.5
cvss2_cna_avNN
cvss2_cna_acLL
cvss2_cna_auSS
cvss2_cna_ciNN
cvss2_cna_iiPP
cvss2_cna_aiNN
cvss2_cna_basescore44

◂ GurɗoGumtiGada ▸

Might our Artificial Intelligence support you?

Check our Alexa App!