A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function of the file index.php. The manipulation of the argument eid with the input 8</h3><script>alert(1)</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205572.
References
| Link | Resource |
|---|---|
| https://github.com/badboycxcc/Student-Admission-Xss | Exploit Third Party Advisory |
| https://vuldb.com/?id.205572 | Third Party Advisory VDB Entry |
| https://github.com/badboycxcc/Student-Admission-Xss | Exploit Third Party Advisory |
| https://vuldb.com/?id.205572 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:01
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.5 |
| References | () https://github.com/badboycxcc/Student-Admission-Xss - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.205572 - Third Party Advisory, VDB Entry |
08 Aug 2022, 17:53
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| CPE | cpe:2.3:a:online_admission_system_project:online_admission_system:-:*:*:*:*:*:*:* | |
| References | (MISC) https://github.com/badboycxcc/Student-Admission-Xss - Exploit, Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.205572 - Third Party Advisory, VDB Entry |
04 Aug 2022, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-04 09:15
Updated : 2024-11-21 07:01
NVD link : CVE-2022-2646
Mitre link : CVE-2022-2646
CVE.ORG link : CVE-2022-2646
JSON object : View
Products Affected
online_admission_system_project
- online_admission_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')