Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-34225 — Proof-of-concept for a stored Cross-Site Scripting (XSS) vulnerability in a Computer Laboratory Management System, demonstrating arbitrary script injection via system name parameters. | Kitploit
Tools/GitHubGitHub/dovankha/cve-2024-34225
Vulnerability AnalysisWeb Application ExploitationWeb SecurityPenetration TestingLearning & Education
GitHubdovankha/cve-2024-34225

CVE-2024-34225

Proof-of-concept for a stored Cross-Site Scripting (XSS) vulnerability in a Computer Laboratory Management System, demonstrating arbitrary script injection via system name parameters.

View Repository
22 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Computer Laboratory Management System using PHP and MySQL 1.0

Submitter: Kha Do

Vulnerability

Cross Site Scripting

Description

Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the name, shortname parameters.

Affected component

Path URL: php-lms/admin/?page=system_info

Parameters: System name (name), System short name (shortname)

POC

Input payload <script>alert(1337)</script> into System name name and save it. system_name

After saving, the pop-up windows like will appear: system_name_popup

Download Tool