SourceCodester PHP CRUD 1.0 Reflected XSS Vulnerability (CVE-2024-8562)

Key Information 1. Vulnerability ID: - VDB-276782 - CVE-2024-8562 2. Vulnerability Name: - SourceCodester PHP CRUD 1.0 /endpoint/Add.php First_Name/Middle_Name/Last_Name Cross Site Scripting 3. Affected File: - /endpoint/Add.php 4. Issue Description: - The vulnerability affects an unknown functionality in the file /endpoint/Add.php. Manipulating the first_name/middle_name/last_name parameters via unknown input can lead to Cross-Site Scripting (XSS). 5. CVSS Meta Temp Score: - 3.3 6. Current Exploit Price: - $0-$5k 7. CTI Interest Score: - 1.27 8. Vulnerability Impact: - Affects Integrity. 9. Vulnerability Description: - The vulnerability exists in SourceCodester PHP CRUD 1.0 and affects the /endpoint/Add.php file. Manipulating the first_name/middle_name/last_name parameters via unknown input can result in Cross-Site Scripting (XSS). The product does not properly neutralize user-controlled input before outputting it to other users. 10. Exploitability: - Requires remote attack. - Successful exploitation requires user interaction. - Known technical details and public exploit tools exist. - The vulnerability has been publicly disclosed and may be exploited. 11. Vulnerability ID and Association: - Vulnerability ID is CVE-2024-8562. - Associated with T1059.007, as marked by the MITRE ATT&CK project. 12. Search Suggestion: - Searching for may help identify vulnerable targets. 13. Recommendation: - No known remediation available. - Recommend replacing the affected component. 14. Related Vulnerabilities: - VDB-276783 is very similar to this vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

SourceCodester PHP CRUD 1.0 Reflected XSS Vulnerability (CVE-2024-8562)