CVE-2024-2832

A vulnerability classified as problematic was found in Campcodes Online Shopping System 1.0. This vulnerability affects unknown code of the file /offersmail.php. The manipulation of the argument email leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257752.

• CWE-79

• https://github.com/comeony/vuln_report/blob/main/Online%20Shopping%20System%20-%20vuln%201.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.257752Permissions Required
• https://vuldb.com/?id.257752Third Party Advisory
• https://github.com/comeony/vuln_report/blob/main/Online%20Shopping%20System%20-%20vuln%201.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.257752Permissions Required
• https://vuldb.com/?id.257752Third Party Advisory

Published

Mar 23, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28298SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 al…8.8
• CVE-2024-2830The WordPress Tag and Category Manager – AI Autotagger plugi…6.4
• CVE-2024-28303Open Source Medicine Ordering System v1.0 was discovered to …9.8
• CVE-2024-2831The Calendar plugin for WordPress is vulnerable to SQL Injec…8.8
• CVE-2024-28318gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to cont…7.1
• CVE-2024-28319gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to cont…6.2
• CVE-2024-28320Insecure Direct Object References (IDOR) vulnerability in Ho…7.6
• CVE-2024-28322SQL Injection vulnerability in /event-management-master/back…9.8
• CVE-2024-28323The bwdates-report-result.php file in Phpgurukul User Regist…6.5
• CVE-2024-28325Asus RT-N12+ B1 router stores credentials in cleartext, whic…6.1
• CVE-2024-28326Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 ro…6.8
• CVE-2024-28327Asus RT-N12+ B1 router stores user passwords in plaintext, w…8.4