Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management System 1.0 allows attackers to run arbitrary code via the search bar.
References
| Link | Resource |
|---|---|
| https://drive.google.com/file/d/1oMNcChsXPMP9pu9lIE2C11n8mzkmLhcY/view | Exploit |
| https://github.com/Agampreet-Singh/CVE-2024-25202 | Exploit Third Party Advisory |
| https://medium.com/%40agampreetsingh_93704/cve-2024-25202-discover-by-agampreet-singh-cyber-security-expert-ff8e32f5cf52 | Exploit Third Party Advisory |
| https://drive.google.com/file/d/1oMNcChsXPMP9pu9lIE2C11n8mzkmLhcY/view | Exploit |
| https://github.com/Agampreet-Singh/CVE-2024-25202 | Exploit Third Party Advisory |
| https://medium.com/%40agampreetsingh_93704/cve-2024-25202-discover-by-agampreet-singh-cyber-security-expert-ff8e32f5cf52 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
27 Mar 2025, 15:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:phpgurukul:user_registration_\&_login_and_user_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Phpgurukul
Phpgurukul user Registration \& Login And User Management System |
|
| References | () https://drive.google.com/file/d/1oMNcChsXPMP9pu9lIE2C11n8mzkmLhcY/view - Exploit | |
| References | () https://github.com/Agampreet-Singh/CVE-2024-25202 - Exploit, Third Party Advisory | |
| References | () https://medium.com/%40agampreetsingh_93704/cve-2024-25202-discover-by-agampreet-singh-cyber-security-expert-ff8e32f5cf52 - Exploit, Third Party Advisory |
Information
Published : 2024-02-28 20:15
Updated : 2025-03-27 15:08
NVD link : CVE-2024-25202
Mitre link : CVE-2024-25202
CVE.ORG link : CVE-2024-25202
JSON object : View
Products Affected
phpgurukul
- user_registration_\&_login_and_user_management_system
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')