CVE-2024-33985: falha de alta gravidade em Janobe School Attendance Monitoring System
Cross-Site Scripting (XSS) vulnerability in Janobe products
Publicada em
Seguir esta CVE+ Monitorar School Attendance Monitoring System+ Monitorar School Event Management System
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 0.3%
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/course/index.php'.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
Janobe · School Attendance Monitoring SystemJanobe · School Event Management SystemCVEs relacionadas — Janobe School Attendance Monitoring System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-33968CRITICALSQL injection in Janobe productsEPSS 0.5%CVE-2024-33973CRITICALSQL injection in Janobe productsEPSS 0.4%CVE-2024-33972CRITICALSQL injection in Janobe productsEPSS 0.4%CVE-2024-33971CRITICALSQL injection in Janobe productsEPSS 0.4%CVE-2024-33970CRITICALSQL injection in Janobe productsEPSS 0.4%CVE-2024-33969CRITICALSQL injection in Janobe productsEPSS 0.4%