Vulnerability · Published Oct 10, 2024 · Assigned by VulDB
CVE-2024-9803code-projects Blood Bank Management System blooddetails.php cross site scripting
Low 3.5
In plain English
A low-severity cross-site scripting in Blood Bank Management System from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Official description
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file blooddetails.php. The manipulation of the argument Availibility leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Blood Bank Management System | 1.0 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
References
- VDB-279951 | code-projects Blood Bank Management System blooddetails.php cross site scripting vdb-entry, technical-description
- VDB-279951 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #418615 | code-projects Blood Bank Management System in php v1.0 Basic Cross Site Scripting third-party-advisory
- https://github.com/cookie5201314/CVE/blob/main/xss4-w.md exploit
- https://code-projects.org/ product