{"id":"CVE-2024-1700","state":"PUBLISHED","title":"keerti1924 PHP-MYSQL-User-Login-System signup.php cross site scripting","description":"A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument username with the input <script>alert(\"xss\")</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254388. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2024-02-21T15:31:04.565Z","updatedAt":"2024-08-08T19:45:22.196Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","source":"VulDB"},"assigner":"VulDB","products":["keerti1924 PHP-MYSQL-User-Login-System"],"affected":[{"vendor":"keerti1924","product":"PHP-MYSQL-User-Login-System","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/?id.254388","https://vuldb.com/?ctiid.254388","https://github.com/omarexala/PHP-MYSQL-User-Login-System---Stored-XSS"],"weaknesses":["CWE-79"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/1xxx/CVE-2024-1700.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-1700","state":"PUBLISHED","datePublished":"2024-02-21T15:31:04.565Z","dateUpdated":"2024-08-08T19:45:22.196Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2024-02-21T10:29:17.651Z"},"containers":{"cna":{"title":"keerti1924 PHP-MYSQL-User-Login-System signup.php cross site scripting","descriptions":[{"lang":"en","value":"A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument username with the input <script>alert(\"xss\")</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254388. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"de","value":"Es wurde eine Schwachstelle in keerti1924 PHP-MYSQL-User-Login-System 1.0 gefunden. Sie wurde als problematisch eingestuft. Dabei betrifft es einen unbekannter Codeteil der Datei /signup.php. Mit der Manipulation des Arguments username mit der Eingabe <script>alert(\"xss\")</script> mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"keerti1924","product":"PHP-MYSQL-User-Login-System","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.254388","name":"VDB-254388 | keerti1924 PHP-MYSQL-User-Login-System signup.php cross site scripting","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.254388","name":"VDB-254388 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://github.com/omarexala/PHP-MYSQL-User-Login-System---Stored-XSS","tags":["exploit"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","type":"CWE","lang":"en","description":"CWE-79 Cross Site Scripting"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2024-02-21T15:31:04.565Z"},"timeline":[{"time":"2024-02-21T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-02-21T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2024-02-21T11:34:38.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"omarexala (VulDB User)","type":"reporter"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.254388","name":"VDB-254388 | keerti1924 PHP-MYSQL-User-Login-System signup.php cross site scripting","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.254388","name":"VDB-254388 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required","x_transferred"]},{"url":"https://github.com/omarexala/PHP-MYSQL-User-Login-System---Stored-XSS","tags":["exploit","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T18:48:21.908Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"keerti1924","product":"php-mysql-user-login-system","defaultStatus":"unknown","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:keerti1924:php-mysql-user-login-system:1.0:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-02-21T17:16:25.428785Z","id":"CVE-2024-1700","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-08T19:45:22.196Z"}}]}}}