CVE-2024-2063

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknown function of the file /admin/app/profile_crud.php. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-255378 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Mar 1, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-20644.3A vulnerability has been found in rahman SelectCours 1.0 and classified as problematic. Affected by this vulnerability is the function getCaCVE-2024-20656.1A vulnerability was found in SourceCodester Barangay Population Monitoring System up to 1.0 and classified as problematic. Affected by this CVE-2024-206528.1Windows HTML Platforms Security Feature Bypass VulnerabilityCVE-2024-206537.8Microsoft Common Log File System Elevation of Privilege VulnerabilityCVE-2024-206548.0Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2024-206556.6Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution VulnerabilityCVE-2024-206567.8Visual Studio Elevation of Privilege VulnerabilityCVE-2024-206577.0Windows Group Policy Elevation of Privilege VulnerabilityCVE-2024-206587.8Microsoft Virtual Hard Disk Elevation of Privilege VulnerabilityCVE-2024-206597.1Windows Hyper-V Security Feature Bypass VulnerabilityCVE-2024-20666.1A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown paCVE-2024-206606.5Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2024-2063: Medium severity, CVSS 4.8 | Vulnix