SourceCodester Modern Loan Management System 1.0 XSS Vulnerability (CVE-2024-9089)

Key Information 1. Vulnerability ID: - VDB-278267 - CVE-2024-9089 2. Vulnerability Name: - SourceCodester Modern Loan Management System 1.0 Update_loan_record.php Amount Cross Site Scripting 3. CVSS Meta Temp Score: - 3.3 4. Current Vulnerability Price: - $0-$5k 5. CTI Interest Score: - 2.89 6. Vulnerability Description: - A vulnerability in SourceCodester Modern Loan Management System 1.0 affecting the file update_loan_record.php. Manipulation of the 'amount' parameter via unknown input can lead to Cross-Site Scripting (XSS) attacks. The product fails to properly handle or neutralize user-controlled input, resulting in output being rendered on web pages visible to other users, thereby compromising integrity. 7. Vulnerability Identification: - CVE-2024-9089 8. Exploit Availability: - Publicly disclosed, potentially exploitable. 9. Technical Details: - Known exploitation method is simple and requires user interaction; technical details and public exploits are available. 10. Exploit Tools: - Exploit tools can be obtained via shawroot.cc. 11. Search Method: - Vulnerable targets can be identified by searching for inurl:update_loan_record.php. 12. Recommended Mitigation: - Replace affected components. 13. Related Vulnerability IDs: - VDB-52192, VDB-111198, VDB-132070, VDB-221733 Summary This vulnerability is a Cross-Site Scripting (XSS) flaw affecting the update_loan_record.php file in SourceCodester Modern Loan Management System 1.0. The exploit is simple, has been publicly disclosed, and may be actively exploited. It is recommended to replace affected components to mitigate potential security risks.

Goal Reached Thanks to every supporter — we hit 100%!

SourceCodester Modern Loan Management System 1.0 XSS Vulnerability (CVE-2024-9089)