SourceCodester Student Study Center Desk Management System HTTP POST Request Users.php cross site scripting

Successful exploitation of CVE-2024-6807 allows an attacker to inject arbitrary JavaScript code into the Student Study Center Desk Management System. This code can then be executed in the context of a user's browser when they access a vulnerable page. The attacker could potentially steal session cookies, redirect users to malicious websites, or deface the application. Given the nature of XSS, the impact can range from minor annoyance to significant data compromise, depending on the attacker's goals and the privileges of the affected user. While the CVSS score is LOW, the ease of exploitation and potential for user interaction make this a concerning vulnerability.

Organizations and individuals using the Student Study Center Desk Management System version 1.0 are at risk. This includes educational institutions, libraries, or any entity utilizing this system for desk management. Shared hosting environments where multiple users share the same server instance are particularly vulnerable, as a compromise of one user could potentially impact others.

• php: Examine the /sscdms/classes/Users.php file for improper input sanitization or output encoding. Search for instances where user-supplied data (firstname, middlename, lastname, username) is directly outputted to the page without proper escaping.

// Example of vulnerable code (simplified)
<?php
echo $_GET['firstname']; // Vulnerable to XSS
?>

• generic web: Monitor access logs for requests to /sscdms/classes/Users.php with unusual or suspicious parameters in the firstname, middlename, lastname, or username fields. Look for patterns indicative of XSS attempts (e.g., <script>).

grep 'firstname=.*<script>' access.log

1. 2024-07-17Disclosure

   disclosure

1. Reserviert2024-07-16
2. Veröffentlicht2024-07-17
3. Geändert2025-06-10
4. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-6807 is to upgrade the Student Study Center Desk Management System to version 1.0.1 or later, which contains the fix for this vulnerability. If upgrading is not immediately feasible, consider implementing input validation and output encoding on the /sscdms/classes/Users.php endpoint to sanitize user-supplied data. Web application firewalls (WAFs) configured to detect and block XSS attacks can also provide a temporary layer of protection. Regularly review and update the application's security configuration to minimize the attack surface. After upgrade, confirm by testing the /sscdms/classes/Users.php endpoint with various malicious input strings to ensure the vulnerability is no longer present.