Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability. The value of the FirstRecord request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The attacker can access the system, by using the XSS-reflected method, and then can store information by injecting the admin account on this system.
References
| Link | Resource |
|---|---|
| https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44598 | Exploit Third Party Advisory |
| https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44598 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44598 - Exploit, Third Party Advisory |
05 Jan 2022, 21:47
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.1 |
| CPE | cpe:2.3:a:attendance_management_system_project:attendance_management_system:1.0:*:*:*:*:*:*:* | |
| CWE | CWE-79 | |
| References | (MISC) https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44598 - Exploit, Third Party Advisory |
26 Dec 2021, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-26 15:15
Updated : 2024-11-21 06:31
NVD link : CVE-2021-44598
Mitre link : CVE-2021-44598
CVE.ORG link : CVE-2021-44598
JSON object : View
Products Affected
attendance_management_system_project
- attendance_management_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')