CVE-2024-7284

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in SourceCodester Lot Reservation Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=save_settings. The manipulation of the argument about leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273153 was assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SourceCodester	Lot Reservation Management System	1.0
sourcecodester	lot_reservation_management_system	1.0

References

https://gist.github.com/topsky979/16da371a38fd91d64765fd16ed3d049eExploit
https://vuldb.com/?ctiid.273153Permissions Required, Third Party Advisory
https://vuldb.com/?id.273153Third Party Advisory
https://vuldb.com/?submit.381223Third Party Advisory

Timeline

Published: Jul 31, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-72855.4A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as problematic. This vulnerabili CVE-2024-72869.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This issue affects some CVE-2024-72878.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as critical. Affected is an CVE-2024-72888.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been declared as critical. Affected by this CVE-2024-72898.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been rated as critical. Affected by this iss CVE-2024-72908.8A vulnerability classified as critical has been found in SourceCodester Establishment Billing Management System 1.0. This affects an unknown CVE-2024-72917.2The JetFormBuilder plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.4.1. This is due to CVE-2024-72928.8In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restr CVE-2024-72938.8In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak passwo CVE-2024-72946.5In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without r CVE-2024-72956.2In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm whi CVE-2024-72962.7An issue was discovered in GitLab EE affecting all versions from 16.5 prior to 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2 which