CVE-2024-10198
code-projects Pharmacy Management System Manage Customer Page manage_customer.php cross site scripting
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /manage_customer.php of the component Manage Customer Page. The manipulation of the argument suppliers_name/address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting files to be affected. Other parameters might be affected as well.
In code-projects Pharmacy Management System 1.0 wurde eine problematische Schwachstelle ausgemacht. Dabei geht es um eine nicht genauer bekannte Funktion der Datei /manage_customer.php der Komponente Manage Customer Page. Mittels Manipulieren des Arguments suppliers_name/address mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2024-10-20 CVE Reserved
- 2024-10-21 CVE Published
- 2024-10-21 CVE Updated
- 2024-10-21 First Exploit
- 2024-10-23 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (4)
URL | Tag | Source |
---|---|---|
https://code-projects.org | Product | |
https://vuldb.com/?id.281023 | Technical Description | |
https://vuldb.com/?submit.426885 | Third Party Advisory |
URL | Date | SRC |
---|---|---|
https://gist.github.com/higordiego/93343006341d3799de0cb8912cc328ec | 2024-10-21 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Code-projects Search vendor "Code-projects" | Pharmacy Management System Search vendor "Code-projects" for product "Pharmacy Management System" | 1.0 Search vendor "Code-projects" for product "Pharmacy Management System" and version "1.0" | en |
Affected
|