A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0. This issue affects access to /scas/admin/. The manipulation of the parameter page with the input %22%3E%3Cimg%20src=x%20onerror=alert(1)%3E leads to a reflected cross site scripting. The attack may be initiated remotely and does not require any form of authentication. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.196751 | Third Party Advisory |
| https://vuldb.com/?id.196751 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?id.196751 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 4.3 |
15 Apr 2022, 14:04
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:school_club_application_system_project:school_club_application_system:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.1 |
| CWE | CWE-79 | |
| References | (N/A) https://vuldb.com/?id.196751 - Third Party Advisory |
09 Apr 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-04-09 20:15
Updated : 2024-11-21 06:40
NVD link : CVE-2022-1288
Mitre link : CVE-2022-1288
CVE.ORG link : CVE-2022-1288
JSON object : View
Products Affected
school_club_application_system_project
- school_club_application_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')