CVE-2024-10199

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /manage_medicine.php of the component Manage Medicines Page. The manipulation of the argument name/address/doctor_address/suppliers_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting files to be affected.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:code-projects:pharmacy_management:1.0:*:*:*:*:*:*:*

History

22 Oct 2024, 15:40

Type Values Removed Values Added
First Time Code-projects
Code-projects pharmacy Management
CVSS v2 : 3.3
v3 : 2.4
v2 : 3.3
v3 : 4.8
CPE cpe:2.3:a:code-projects:pharmacy_management:1.0:*:*:*:*:*:*:*
References () https://code-projects.org/ - () https://code-projects.org/ - Product
References () https://gist.github.com/higordiego/0dae6dd4a36acd12bcc408caf1c787d9 - () https://gist.github.com/higordiego/0dae6dd4a36acd12bcc408caf1c787d9 - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.281024 - () https://vuldb.com/?ctiid.281024 - Permissions Required
References () https://vuldb.com/?id.281024 - () https://vuldb.com/?id.281024 - Third Party Advisory
References () https://vuldb.com/?submit.426916 - () https://vuldb.com/?submit.426916 - Third Party Advisory

21 Oct 2024, 17:09

Type Values Removed Values Added
Summary
  • (es) Se ha encontrado una vulnerabilidad en code-projects Pharmacy Management System 1.0. Se ha calificado como problemática. Este problema afecta a algunas funciones desconocidas del archivo /manage_medicine.php del componente Manage Medicines Page. La manipulación del argumento name/address/doctor_address/suppliers_name provoca Cross-Site Scripting. El ataque puede ejecutarse de forma remota. El exploit se ha hecho público y puede utilizarse. El aviso inicial para investigadores menciona archivos contradictorios que se verán afectados.

21 Oct 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-21 02:15

Updated : 2024-10-22 15:40


NVD link : CVE-2024-10199

Mitre link : CVE-2024-10199

CVE.ORG link : CVE-2024-10199


JSON object : View

Products Affected

code-projects

  • pharmacy_management
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')