| Titel | itsourcecode Online Blood Bank Management System 1.0 Cross Site Scripting |
|---|
| Beschreibung | In Version 1.0 of the Online Blood Bank Management application, Stored Cross-Site Scripting can be performed from the /request.php page via unknown functionality of the request.php component. An attacker can supply malicious commands to be stored and executed when a user navigates to the 'viewrequest.php' page or when an admin navigates to the /admin/request.php page. |
|---|
| Quelle | ⚠️ https://github.com/cl4irv0yance/CVEs/issues/1 |
|---|
| Benutzer | mdsmith49 (UID 72657) |
|---|
| Einreichung | 29.07.2024 18:45 (vor 2 Jahren) |
|---|
| Moderieren | 30.07.2024 19:55 (1 day later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 273185 [itsourcecode Online Blood Bank Management System 1.0 Send Blood Request Page /request.php Address/bloodgroup Cross Site Scripting] |
|---|
| Punkte | 18 |
|---|