CVE-2024-6942

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-6942

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6942.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-6942

Published

2024-07-21T06:31:04.313Z

Modified

2026-07-15T01:49:05.200561786Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

ThinkSAAS Admin Panel Security Center anti.php cross site scripting

Details

A vulnerability, which was classified as problematic, was found in ThinkSAAS 3.7.0. Affected is an unknown function of the file app/system/action/anti.php of the component Admin Panel Security Center. The manipulation of the argument ip/email/phone leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272064.

Database specific

{
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6942.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.7.0"
                },
                {
                    "last_affected": "3.7.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-79"
    ]
}

References

Affected packages

Git / github.com/thinksaas/thinksaas

Affected ranges

Type

GIT

Repo

https://github.com/thinksaas/thinksaas

Events

Introduced

dc668ebe038237df7e3ec78455c141fb4f3789d4

Last affected

dc668ebe038237df7e3ec78455c141fb4f3789d4

Database specific

{
    "cpe": "cpe:2.3:a:thinksaas:thinksaas:3.70:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.70"
        },
        {
            "last_affected": "3.70"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

3.*

3.70

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6942.json"