CVE-2024-31586

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
sourcecodester	computer_laboratory_management_system	1.0

References

https://github.com/CyberSentryX/CVE_Hunting/tree/main/CVE-2024-31586Exploit, Third Party Advisory
https://github.com/CyberSentryX/CVE_Hunting/tree/main/CVE-2024-31586Exploit, Third Party Advisory

Timeline

Published: Jun 20, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-315876.5SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to download device configuration files via a CVE-2024-31598.8Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a c CVE-2024-31605.3** DISPUTED ** A vulnerability, which was classified as problematic, was found in Intelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCV CVE-2024-316019.8An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute CVE-2024-316097.1Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields CVE-2024-31615.4The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget's attributes in all version CVE-2024-316106.3File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attac CVE-2024-316119.1SeaCMS 12.9 has a file deletion vulnerability via admin_template.php.CVE-2024-316126.5Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerability to access adminis CVE-2024-316135.4BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code."CVE-2024-316159.8ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.CVE-2024-316168.8An issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version RSR10-01G-T-S_RSR_3.0(1)B9P2, Release(0715