CVE-2024-4797

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ajax.php. The manipulation of the argument name/customer_name/username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263896.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Campcodes	Online Laundry Management System	1.0

References

https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/xss_action.mdExploit
https://vuldb.com/?ctiid.263896Permissions Required, VDB Entry
https://vuldb.com/?id.263896Permissions Required, VDB Entry
https://vuldb.com/?submit.332539Third Party Advisory, VDB Entry
https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/xss_action.mdExploit
https://vuldb.com/?ctiid.263896Permissions Required, VDB Entry
https://vuldb.com/?id.263896Permissions Required, VDB Entry
https://vuldb.com/?submit.332539Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-479716.5Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service.CVE-2024-479724.0Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the re CVE-2024-479735.1In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker.CVE-2024-479744.4Race condition during resource shutdown in some Solidigm DC Products may allow an attacker to potentially enable denial of service.CVE-2024-479757.0Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized CVE-2024-479766.7Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized ac CVE-2024-479778.8Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization CVE-2024-479787.8Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local CVE-2024-47989.8A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this i CVE-2024-479846.5Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit t CVE-2024-47998.8A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. This affects an unknown part of the CVE-2024-48008.8A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical. This vulnerability affects unknown cod