CVE-2024-7321

A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273232.
Configurations

Configuration 1 (hide)

cpe:2.3:a:adonesevangelista:online_blood_bank_management_system:1.0:*:*:*:*:*:*:*

History

12 Aug 2024, 16:49

Type Values Removed Values Added
First Time Adonesevangelista
Adonesevangelista online Blood Bank Management System
CVSS v2 : 5.0
v3 : 4.3
v2 : 5.0
v3 : 6.1
CPE cpe:2.3:a:adonesevangelista:online_blood_bank_management_system:1.0:*:*:*:*:*:*:*
References () https://github.com/cl4irv0yance/CVEs/issues/4 - () https://github.com/cl4irv0yance/CVEs/issues/4 - Exploit
References () https://vuldb.com/?ctiid.273232 - () https://vuldb.com/?ctiid.273232 - Permissions Required
References () https://vuldb.com/?id.273232 - () https://vuldb.com/?id.273232 - Permissions Required
References () https://vuldb.com/?submit.383437 - () https://vuldb.com/?submit.383437 - VDB Entry

31 Jul 2024, 12:57

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-31 12:15

Updated : 2024-08-12 16:49


NVD link : CVE-2024-7321

Mitre link : CVE-2024-7321

CVE.ORG link : CVE-2024-7321


JSON object : View

Products Affected

adonesevangelista

  • online_blood_bank_management_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')