CVE-2024-3377

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0

Description A vulnerability was found in the SourceCodester Computer Laboratory Management System, affecting unknown code of the file /classes/SystemSettings.php?f=update settings. The manipulation of the name argument leads to cross-site scripting. The attack can be initiated remotely.

Recommendations For version 1.0, consider disabling access to the /classes/SystemSettings.php?f=update settings file until a patch is available. Restrict the manipulation of the name argument to minimize the risk of exploitation.