PoC Index85,101 CVEs with PoCs

CVE-2024-34225

MEDIUM 6.1EPSS 0.6%

Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the name, shortname parameters.

CVSS v3.1 CNA
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.57% chance of exploitation in the next 30 days, 46th percentile
Published
2024-05-13
Updated
2025-02-13

Proof-of-concept exploits (1)

References

Related