CVE-2024-8604

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-8604
A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0. This affects an unknown part of the file index.php of the component Create an Account Page. The manipulation of the argument First Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://vuldb.com/?ctiid.276831 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.276831 Third Party Advisory VDB Entry
https://vuldb.com/?submit.404660 Third Party Advisory VDB Entry
https://www.sourcecodester.com/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:online_food_ordering_system_project:online_food_ordering_system:2.0:*:*:*:*:*:*:*
History

10 Sep 2024, 19:14

Type Values Removed Values Added
First Time Online Food Ordering System Project
Online Food Ordering System Project online Food Ordering System
CPE cpe:2.3:a:online_food_ordering_system_project:online_food_ordering_system:2.0:*:*:*:*:*:*:*
CVSS v2 : 5.0
v3 : 4.3 		v2 : 5.0
v3 : 6.1
Summary
  • (es) Se ha encontrado una vulnerabilidad clasificada como problemática en SourceCodester Online Food Ordering System 2.0. Afecta a una parte desconocida del archivo index.php del componente Create an Account Page. La manipulación del argumento Nombre/Apellido provoca cross site scripting. Es posible iniciar el ataque de forma remota.
References () https://vuldb.com/?ctiid.276831 - () https://vuldb.com/?ctiid.276831 - Permissions Required, Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.276831 - () https://vuldb.com/?id.276831 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.404660 - () https://vuldb.com/?submit.404660 - Third Party Advisory, VDB Entry
References () https://www.sourcecodester.com/ - () https://www.sourcecodester.com/ - Product

09 Sep 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-09 16:15

Updated : 2024-09-10 19:14

NVD link : CVE-2024-8604

Mitre link : CVE-2024-8604

CVE.ORG link : CVE-2024-8604

JSON object : View

Products Affected

online_food_ordering_system_project

  • online_food_ordering_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')