Vulnerability CVE-2024-10198


Published: 2024-10-21

Description:
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /manage_customer.php of the component Manage Customer Page. The manipulation of the argument suppliers_name/address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting files to be affected. Other parameters might be affected as well.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://vuldb.com/?id.281023
https://vuldb.com/?ctiid.281023
https://vuldb.com/?submit.426885
https://gist.github.com/higordiego/93343006341d3799de0cb8912cc328ec
https://code-projects.org/

Copyright 2024, cxsecurity.com

 

Back to Top