CVE-2024-4075

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261801 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Kashipara	Online Furniture Shopping Ecommerce Website	1.0
kashipara	online_furniture_shopping_ecommerce_website	1.0

References

https://github.com/E1CHO/cve_hub/blob/main/Online%20Furniture%20Shopping%20Ecommerce%20Website/Online%20Furniture%20Shopping%20Ecommerce%20Website%20Project%20-%20vuln%207.pdfExploit, Third Party Advisory
https://vuldb.com/?ctiid.261801Permissions Required, VDB Entry
https://vuldb.com/?id.261801Third Party Advisory, VDB Entry
https://vuldb.com/?submit.321451Exploit, Third Party Advisory, VDB Entry
https://github.com/E1CHO/cve_hub/blob/main/Online%20Furniture%20Shopping%20Ecommerce%20Website/Online%20Furniture%20Shopping%20Ecommerce%20Website%20Project%20-%20vuln%207.pdfExploit, Third Party Advisory
https://vuldb.com/?ctiid.261801Permissions Required, VDB Entry
https://vuldb.com/?id.261801Third Party Advisory, VDB Entry
https://vuldb.com/?submit.321451Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Apr 23, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-407505.3Linksys Velop Pro 6E 1.0.8 MX6200_1.0.8.215731 and 7 1.0.10.215314 devices send cleartext Wi-Fi passwords over the public Internet during ap CVE-2024-407549.8Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escarg CVE-2024-40767.5Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion fai CVE-2024-407615.3Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a u CVE-2024-407629.8Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain ca CVE-2024-407637.5Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers CVE-2024-407647.5Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS)CVE-2024-407659.8An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of S CVE-2024-407669.8An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized CVE-2024-407676.5In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 im CVE-2024-40777.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign allows Reflected X CVE-2024-407707.5A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileged user may be able t