Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_group.php, in the 'b_id' parameter. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-27542 | Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_group.php, in the 'b_id' parameter. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 17 Apr 2025 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Amss\+\+ Project
Amss\+\+ Project amss\+\+ |
|
| CPEs | cpe:2.3:a:amss\+\+_project:amss\+\+:4.31:*:*:*:*:*:*:* | |
| Vendors & Products |
Amss\+\+ Project
Amss\+\+ Project amss\+\+ |
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: INCIBE
Published:
Updated: 2024-08-01T19:18:48.177Z
Reserved: 2024-03-18T11:08:59.375Z
Link: CVE-2024-2593
Vulnrichment
Updated: 2024-08-01T19:18:48.177Z
NVD
Status : Analyzed
Published: 2024-03-18T14:15:12.233
Modified: 2025-04-17T21:17:09.140
Link: CVE-2024-2593
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses