SourceCodester/Campcodes School Log Management System ajax.php cross site scripting

Successful exploitation of CVE-2024-7218 could allow an attacker to execute arbitrary JavaScript code within the context of a user's browser session. This could lead to session hijacking, credential theft, or defacement of the administrative interface. Given the administrative nature of the affected endpoint, an attacker gaining control could potentially modify student records, add unauthorized users, or compromise the entire system. The published proof-of-concept significantly lowers the barrier to entry for exploitation.

Schools and educational institutions using SourceCodester's School Log Management System are at risk. Specifically, organizations relying on the default configuration and not implementing additional security measures are particularly vulnerable. Shared hosting environments where multiple users share the same server resources could also be affected if one user's account is compromised.

• php: Examine the /admin/ajax.php file for unsanitized input handling of the 'Name' parameter. Search for instances where user input is directly outputted to the page without proper encoding.

// Example of vulnerable code
<?php
echo $_GET['Name']; // Vulnerable to XSS
?>

• generic web: Monitor access logs for requests to /admin/ajax.php?action=save_student containing suspicious characters or patterns commonly associated with XSS payloads (e.g., <script>, <img src=x onerror=alert(1)>). • generic web: Use a web proxy or browser developer tools to inspect the application's response for unexpected JavaScript code execution.

1. 2024-07-30Disclosure

   disclosure

1. Reserviert2024-07-29
2. Veröffentlicht2024-07-30
3. Geändert2025-09-01
4. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-7218 is to immediately upgrade to version 1.0.1 of the School Log Management System. If upgrading is not immediately feasible, consider implementing input validation and sanitization on the 'Name' parameter within the /admin/ajax.php?action=save_student endpoint to prevent the injection of malicious scripts. Web application firewalls (WAFs) configured to detect and block XSS payloads can also provide a temporary layer of protection. After upgrading, confirm the vulnerability is resolved by attempting to inject a simple XSS payload (e.g., <script>alert(1)</script>) into the 'Name' field and verifying that the script does not execute.