cve/2024/CVE-2024-34224.md
2024-06-22 09:37:59 +00:00

769 B

CVE-2024-34224

Description

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters.

POC

Reference

Github