CVE-2024-11246
code-projects Farmacia adicionar-cliente.php cross site scripting
- State
- Published
- Severity
- 5.3 Medium
- Published
- Nov 15, 2024
- Updated
- Nov 15, 2024
- Reserved
- Nov 15, 2024
Description
A vulnerability, which was classified as problematic, was found in code-projects Farmacia 1.0. Affected is an unknown function of the file /adicionar-cliente.php. The manipulation of the argument nome/cpf/dataNascimento leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions the parameter "nome" to be affected. But further inspection indicates that other parameters might be affected as well.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 3.5 Low | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 3.5 Low | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 4.0 Medium | AV:N/AC:L/Au:S/C:N/I:P/A:N | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Farmaciacode-projects |
|
References
- VDB-284682 | code-projects Farmacia adicionar-cliente.php cross site scriptingvdb-entrytechnical-description
- VDB-284682 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #443189 | code-projects farmacia-in-php 1 Cross Site Scriptingthird-party-advisory
- https://github.com/curry136/cve/blob/main/xss8.mdexploit
- https://code-projects.org/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.