A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. This vulnerability affects unknown code of the file /login.php of the component Login Page. The manipulation of the argument emailcookie/passwordcookie leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256036. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20%5BSecret-Coder-PHP-Project%20XSS%5D%20on%20login.php%20via%20arbitrary%20cookies.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.256036 | Permissions Required |
| https://vuldb.com/?id.256036 | Third Party Advisory |
| https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20%5BSecret-Coder-PHP-Project%20XSS%5D%20on%20login.php%20via%20arbitrary%20cookies.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.256036 | Permissions Required |
| https://vuldb.com/?id.256036 | Third Party Advisory |
Configurations
History
11 Mar 2025, 16:53
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:keerti1924:secret-coder-php-project:1.0:*:*:*:*:*:*:* | |
| First Time |
Keerti1924
Keerti1924 secret-coder-php-project |
|
| References | () https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20%5BSecret-Coder-PHP-Project%20XSS%5D%20on%20login.php%20via%20arbitrary%20cookies.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.256036 - Permissions Required | |
| References | () https://vuldb.com/?id.256036 - Third Party Advisory |
21 Nov 2024, 09:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/keerti1924%20%5BSecret-Coder-PHP-Project%20XSS%5D%20on%20login.php%20via%20arbitrary%20cookies.md - | |
| References | () https://vuldb.com/?ctiid.256036 - | |
| References | () https://vuldb.com/?id.256036 - |
07 Mar 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-07 22:15
Updated : 2025-03-11 16:53
NVD link : CVE-2024-2266
Mitre link : CVE-2024-2266
CVE.ORG link : CVE-2024-2266
JSON object : View
Products Affected
keerti1924
- secret-coder-php-project
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')