CVE-2024-2066

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255381 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Mar 1, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-206606.5Microsoft Message Queuing Information Disclosure VulnerabilityCVE-2024-206617.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2024-206624.9Windows Online Certificate Status Protocol (OCSP) Information Disclosure VulnerabilityCVE-2024-206636.5Windows Message Queuing Client (MSMQC) Information DisclosureCVE-2024-206646.5Microsoft Message Queuing Information Disclosure VulnerabilityCVE-2024-206656.7BitLocker Security Feature Bypass VulnerabilityCVE-2024-206666.6BitLocker Security Feature Bypass VulnerabilityCVE-2024-206677.5Azure DevOps Server Remote Code Execution VulnerabilityCVE-2024-206696.7Secure Boot Security Feature Bypass VulnerabilityCVE-2024-20679.8A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknCVE-2024-206708.1Outlook for Windows Spoofing VulnerabilityCVE-2024-206715.5Microsoft Defender Security Feature Bypass Vulnerability
CVE-2024-2066: Medium severity, CVSS 6.1 | Vulnix