CVE-2024-4644

A vulnerability has been found in SourceCodester Prison Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /Employee/changepassword.php. The manipulation of the argument txtold_password/txtnew_password/txtconfirm_password leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263488.

• CWE-79

• https://github.com/yylmm/CVE/blob/main/Prison%20Management%20System/xss3.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.263488Permissions Required, VDB Entry
• https://vuldb.com/?id.263488Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.330021Third Party Advisory, VDB Entry
• https://github.com/yylmm/CVE/blob/main/Prison%20Management%20System/xss3.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.263488Permissions Required, VDB Entry
• https://vuldb.com/?id.263488Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.330021Third Party Advisory, VDB Entry

Published

May 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-46432Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Acces…8.8
• CVE-2024-46433A default credentials vulnerability in Tenda W18E V16.01.0.8…8.8
• CVE-2024-46434Tenda W18E V16.01.0.8(1625) suffers from authentication bypa…8.8
• CVE-2024-46435A stack overflow vulnerability in the Tenda W18E V16.01.0.8(…8
• CVE-2024-46436Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows …8.3
• CVE-2024-46437A sensitive information disclosure vulnerability in the Tend…6.5
• CVE-2024-46441An arbitrary file upload vulnerability in YPay 1.2.0 allows …8.8
• CVE-2024-46442An issue in the BYD Dilink Headunit System v3.0 to v4.0 allo…9.8
• CVE-2024-46446Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An att…9.8
• CVE-2024-4645A vulnerability was found in SourceCodester Prison Managemen…5.4
• CVE-2024-46450Incorrect access control in Tenda AC1200 Smart Dual-Band WiF…8.1
• CVE-2024-46451TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overf…9.8