code-projects Blood Bank System 1.0 /viewrequest.php Cross Site Scripting

Gaskiya vulnerability da aka ware a matsayin karshewa an samu a code-projects Blood Bank System 1.0. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil /viewrequest.php, a cikin sashen $software_component. A sa manipulation ka Cross Site Scripting. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-79. Hakika, rauni an bayyana shi 10/18/2024. An raba bayanin tsaro don saukewa a github.com. Wannan matsala ana saninta da CVE-2024-10142. Ngam yiɗi ka a tuma ndiyam ka nder layi. Tekinikal faɗi ga. Har ila yau, exploit ɗin yana nan. An bayyana exploit ɗin ga mutane kuma yana iya amfani. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á sàmbu huɗɗi-na-gaskiya. Exploit ɗin za a iya saukewa daga github.com. 0-day shima, an ndiyam a wuro be $0-$5k. Once again VulDB remains the best source for vulnerability data.

5 Goyarwa · 113 Datenpunkte

FurɗeSúgá
10/18/2024 18:31
Gargadi 1/4
10/19/2024 04:12
Gargadi 2/4
10/19/2024 04:15
Gargadi 3/4
10/19/2024 21:07
Gargadi 4/4
03/03/2025 18:50
software_vendorcode-projectscode-projectscode-projectscode-projectscode-projects
software_nameBlood Bank SystemBlood Bank SystemBlood Bank SystemBlood Bank SystemBlood Bank System
software_version1.01.01.01.01.0
software_file/viewrequest.php/viewrequest.php/viewrequest.php/viewrequest.php/viewrequest.php
vulnerability_cweCWE-79 (Cross Site Scripting)CWE-79 (Cross Site Scripting)CWE-79 (Cross Site Scripting)CWE-79 (Cross Site Scripting)CWE-79 (Cross Site Scripting)
vulnerability_risk11111
cvss3_vuldb_avNNNNN
cvss3_vuldb_acLLLLL
cvss3_vuldb_uiRRRRR
cvss3_vuldb_sUUUUU
cvss3_vuldb_cNNNNN
cvss3_vuldb_iLLLLL
cvss3_vuldb_aNNNNN
cvss3_vuldb_ePPPPP
cvss3_vuldb_rcRRRRR
advisory_urlhttps://github.com/WrongDish/CVE/blob/main/xss6.mdhttps://github.com/WrongDish/CVE/blob/main/xss6.mdhttps://github.com/WrongDish/CVE/blob/main/xss6.mdhttps://github.com/WrongDish/CVE/blob/main/xss6.mdhttps://github.com/WrongDish/CVE/blob/main/xss6.md
exploit_availability11111
exploit_publicity11111
exploit_urlhttps://github.com/WrongDish/CVE/blob/main/xss6.mdhttps://github.com/WrongDish/CVE/blob/main/xss6.mdhttps://github.com/WrongDish/CVE/blob/main/xss6.mdhttps://github.com/WrongDish/CVE/blob/main/xss6.mdhttps://github.com/WrongDish/CVE/blob/main/xss6.md
source_cveCVE-2024-10142CVE-2024-10142CVE-2024-10142CVE-2024-10142CVE-2024-10142
cna_responsibleVulDBVulDBVulDBVulDBVulDB
software_typeBanking SoftwareBanking SoftwareBanking SoftwareBanking SoftwareBanking Software
cvss2_vuldb_avNNNNN
cvss2_vuldb_acLLLLL
cvss2_vuldb_ciNNNNN
cvss2_vuldb_iiPPPPP
cvss2_vuldb_aiNNNNN
cvss2_vuldb_ePOCPOCPOCPOCPOC
cvss2_vuldb_rcURURURURUR
cvss4_vuldb_avNNNNN
cvss4_vuldb_acLLLLL
cvss4_vuldb_vcNNNNN
cvss4_vuldb_viLLLLL
cvss4_vuldb_vaNNNNN
cvss4_vuldb_ePPPPP
cvss2_vuldb_auSSSSS
cvss2_vuldb_rlNDNDNDNDND
cvss3_vuldb_prLLLLL
cvss3_vuldb_rlXXXXX
cvss4_vuldb_atNNNNN
cvss4_vuldb_prLLLLL
cvss4_vuldb_uiNNNNP
cvss4_vuldb_scNNNNN
cvss4_vuldb_siNNNNN
cvss4_vuldb_saNNNNN
cvss2_vuldb_basescore4.04.04.04.04.0
cvss2_vuldb_tempscore3.43.43.43.43.4
cvss3_vuldb_basescore3.53.53.53.53.5
cvss3_vuldb_tempscore3.23.23.23.23.2
cvss3_meta_basescore3.53.56.25.35.3
cvss3_meta_tempscore3.23.26.05.25.2
cvss4_vuldb_bscore5.35.35.35.35.1
cvss4_vuldb_btscore2.12.12.12.12.0
advisory_date1729202400 (10/18/2024)1729202400 (10/18/2024)1729202400 (10/18/2024)1729202400 (10/18/2024)1729202400 (10/18/2024)
price_0day$0-$5k$0-$5k$0-$5k$0-$5k$0-$5k
cvss3_researcher_sCCCC
cvss2_researcher_avNNNN
cvss2_researcher_auNNNN
cvss3_researcher_rcCCCC
cvss3_researcher_uiNNNN
cvss3_researcher_acHHHH
cvss3_researcher_aHHHH
cvss3_researcher_cHHHH
cvss3_researcher_iHHHH
cvss2_researcher_rlWWWW
cvss3_researcher_avNNNN
cvss3_researcher_prNNNN
cvss2_researcher_ciCCCC
cvss2_researcher_acHHHH
cvss3_researcher_rlWWWW
cvss3_researcher_eHHHH
cvss2_researcher_aiCCCC
cvss2_researcher_rcCCCC
cvss2_researcher_eFFFF
cvss2_researcher_iiCCCC
cvss2_researcher_basescore7.67.67.6
cvss3_researcher_basescore9.09.09.0
cve_nvd_summaryA vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /viewrequest.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /viewrequest.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
cvss4_cna_avNN
cvss4_cna_acLL
cvss4_cna_atNN
cvss4_cna_prLL
cvss4_cna_uiNN
cvss4_cna_vcNN
cvss4_cna_viLL
cvss4_cna_vaNN
cvss4_cna_scNN
cvss4_cna_siNN
cvss4_cna_saNN
cvss4_cna_bscore5.35.3
cvss3_cna_avNN
cvss3_cna_acLL
cvss3_cna_prLL
cvss3_cna_uiRR
cvss3_cna_sUU
cvss3_cna_cNN
cvss3_cna_iLL
cvss3_cna_aNN
cvss3_cna_basescore3.53.5
cvss2_cna_avNN
cvss2_cna_acLL
cvss2_cna_auSS
cvss2_cna_ciNN
cvss2_cna_iiPP
cvss2_cna_aiNN
cvss2_cna_basescore44

Do you need the next level of professionalism?

Upgrade your account now!