CVE-2024-5370

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file submit_enroll_staff.php. The manipulation of the argument class_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266282 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Kashipara	College Management System	1.0
college_management_system_project	college_management_system	1.0

References

https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%204.pdfExploit
https://vuldb.com/?ctiid.266282Permissions Required, VDB Entry
https://vuldb.com/?id.266282Permissions Required, VDB Entry
https://vuldb.com/?submit.343450Third Party Advisory, VDB Entry
https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%204.pdfExploit
https://vuldb.com/?ctiid.266282Permissions Required, VDB Entry
https://vuldb.com/?id.266282Permissions Required, VDB Entry
https://vuldb.com/?submit.343450Third Party Advisory, VDB Entry

Timeline

Published: May 26, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-537007.2A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have g CVE-2024-537013.1Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary applications can be set not to b CVE-2024-537025.3Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that,CVE-2024-537038.1A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web serv CVE-2024-537049.8An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.CVE-2024-537057.5A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection t CVE-2024-537067.8A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to CVE-2024-537074.3Cross-Site Request Forgery (CSRF) vulnerability in ahmeti Ahmeti Wp Güzel Sözler ahmeti-wp-guzel-sozler allows Cross Site Request Forgery.Th CVE-2024-537085.3Missing Authorization vulnerability in kekotron AI Quiz ai-quiz allows Accessing Functionality Not Properly Constrained by ACLs.This issue a CVE-2024-537096.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Uddin Generic Elements generic-e CVE-2024-53716.1A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. This affects an unknown part of the fil CVE-2024-537107.1Cross-Site Request Forgery (CSRF) vulnerability in ITERAS ITERAS iteras allows Stored XSS.This issue affects ITERAS: from n/a through <= 1.8