CVE-2024-2685

A vulnerability, which was classified as problematic, was found in Campcodes Online Job Finder System 1.0. This affects an unknown part of the file /admin/applicants/index.php. The manipulation of the argument view leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257385 was assigned to this vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:campcodes:online_job_finder_system:1.0:*:*:*:*:*:*:*

History

19 Feb 2025, 18:20

Type Values Removed Values Added
First Time Campcodes
Campcodes online Job Finder System
CPE cpe:2.3:a:campcodes:online_job_finder_system:1.0:*:*:*:*:*:*:*
References () https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2020.pdf - () https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2020.pdf - Exploit
References () https://vuldb.com/?ctiid.257385 - () https://vuldb.com/?ctiid.257385 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.257385 - () https://vuldb.com/?id.257385 - Permissions Required, VDB Entry

Information

Published : 2024-03-20 10:15

Updated : 2025-02-19 18:20


NVD link : CVE-2024-2685

Mitre link : CVE-2024-2685

CVE.ORG link : CVE-2024-2685


JSON object : View

Products Affected

campcodes

  • online_job_finder_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')