CVE-2024-3084

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been rated as problematic. This issue affects some unknown processing of the component Hire an Ambulance Page. The manipulation of the argument Patient Name/Relative Name/Relative Phone Number/City/State/Message leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258677 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
PHPGurukul	Emergency Ambulance Hiring Portal	1.0
phpgurukul	emergency_ambulance_hiring_portal	1.0

References

https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/eahp_sxss.mdExploit
https://vuldb.com/?ctiid.258677Permissions Required, VDB Entry
https://vuldb.com/?id.258677Third Party Advisory, VDB Entry
https://vuldb.com/?submit.306957Exploit, VDB Entry
https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/eahp_sxss.mdExploit
https://vuldb.com/?ctiid.258677Permissions Required, VDB Entry
https://vuldb.com/?id.258677Third Party Advisory, VDB Entry
https://vuldb.com/?submit.306957Exploit, VDB Entry

Timeline

Published: Mar 30, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-308406.5A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN parameter in the from CVE-2024-308456.1Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the va CVE-2024-308486.1Cross-site scripting (XSS) vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script CVE-2024-308499.8Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via f CVE-2024-30859.8A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function o CVE-2024-308516.5Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the downl CVE-2024-308558.8DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php.CVE-2024-308589.8netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php.CVE-2024-308598.8netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.CVE-2024-30866.1A vulnerability classified as problematic was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is a CVE-2024-308608.8netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.CVE-2024-308615.3netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php.