CVE-2024-4075

A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261801 was assigned to this vulnerability.

• CWE-79

• https://github.com/E1CHO/cve_hub/blob/main/Online%20Furniture%20Shopping%20Ecommerce%20Website/Online%20Furniture%20Shopping%20Ecommerce%20Website%20Project%20-%20vuln%207.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.261801Permissions Required, VDB Entry
• https://vuldb.com/?id.261801Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.321451Exploit, Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Online%20Furniture%20Shopping%20Ecommerce%20Website/Online%20Furniture%20Shopping%20Ecommerce%20Website%20Project%20-%20vuln%207.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.261801Permissions Required, VDB Entry
• https://vuldb.com/?id.261801Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.321451Exploit, Third Party Advisory, VDB Entry

Published

Apr 23, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-40744Unrestricted file upload via security bypass in Convert Form…9.8
• CVE-2024-40745Reflected Cross site scripting vulnerability in Convert Form…5.4
• CVE-2024-40746A stored cross-site scripting (XSS) vulnerability in HikaSho…5.4
• CVE-2024-40747Various module chromes didn't properly process inputs, leadi…6.1
• CVE-2024-40748Lack of output escaping in the id attribute of menu lists.7.5
• CVE-2024-40749Improper Access Controls allows access to protected views.7.5
• CVE-2024-40750Linksys Velop Pro 6E 1.0.8 MX6200_1.0.8.215731 and 7 1.0.10.…5.3
• CVE-2024-40754Heap-based Buffer Overflow vulnerability in Samsung Open Sou…9.8
• CVE-2024-4076Client queries that trigger serving stale data and that also…7.5
• CVE-2024-40761Inadequate Encryption Strength vulnerability in Apache Answe…5.3
• CVE-2024-40762Use of Cryptographically Weak Pseudo-Random Number Generator…9.8
• CVE-2024-40763Heap-based buffer overflow vulnerability in the SonicWall SM…7.5