Vulnerability · Published Aug 26, 2024 · Assigned by VulDB
CVE-2024-8174code-projects Blood Bank System Login Page login.php cross site scripting
Medium 4.3
In plain English
A medium-severity cross-site scripting in Blood Bank System from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Official description
A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login.php of the component Login Page. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Blood Bank System | 1.0 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
References
- VDB-275773 | code-projects Blood Bank System Login Page login.php cross site scripting vdb-entry, technical-description
- VDB-275773 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #397883 | code-projects blood-bank-system-in-php-with-source-code v1.0 XSS injection third-party-advisory
- https://github.com/prankfulin/cve/blob/main/xss.md exploit
- https://code-projects.org/ product