CVE-2024-51180

A Reflected Cross Site Scripting (XSS) vulnerability was found in /ifscfinder/index.php in PHPGurukul IFSC Code Finder Project v1.0, which allows remote attackers to execute arbitrary code via the "searchifsccode" parameter.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2024-10-29

Last modified

2024-10-29

Weaknesses

CWE-79

Affected products

• Ifsc Code Finder (Phpgurukul)

References

• https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/IFSC%20Code%20Finder/IFSC%20Code%20Finder%20do.pdf