CVE-2024-51225 - Vulnerability Analysis

Overview

Phpgurukul Vehicle Record Management System v1.0 contains a stored XSS caused by improper sanitization of the brandname parameter in /admin/add-brand.php, letting attackers execute arbitrary scripts via crafted payload injection.

Severity & Score

Impact

Attackers can execute arbitrary scripts in users' browsers, potentially stealing cookies or performing actions on behalf of users.

Mitigation

Update to the latest version with proper input sanitization or apply patches to sanitize the brandname parameter.

References

• https://github.com/Buckdray/vulnerability-research
• https://github.com/Buckdray/vulnerability-research/tree/main/CVE-2024-51225

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner