CVE-2024-2530

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/update-rooms.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256967. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Mar 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-253004.8A cross-site scripting (XSS) vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload CVE-2024-253017.2Redaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the component /pages/templates.php.CVE-2024-253029.8Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter.CVE-2024-253048.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."CVE-2024-253058.8Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php.CVE-2024-253068.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php".CVE-2024-253079.8Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/booking.php?id=1."CVE-2024-253088.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php.CVE-2024-253098.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php.CVE-2024-25318.8A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown CVE-2024-253108.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."CVE-2024-253128.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5."