CVE-2024-7321: falha de média gravidade em itsourcecode Online Blood Bank Management System
itsourcecode Online Blood Bank Management System User Registration signup.php cross site scripting
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273232.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
itsourcecode · Online Blood Bank Management SystemCVEs relacionadas — itsourcecode Online Blood Bank Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-5517MEDIUMitsourcecode Online Blood Bank Management System changepwd.php sql injectionEPSS 0.9%CVE-2024-7320MEDIUMitsourcecode Online Blood Bank Management System Admin Login index.php sql injectionEPSS 0.7%CVE-2024-6966MEDIUMitsourcecode Online Blood Bank Management System Login login.php sql injectionEPSS 0.7%CVE-2024-7946MEDIUMitsourcecode Online Blood Bank Management System User Signup register.php sql injectionEPSS 0.7%CVE-2024-5516MEDIUMitsourcecode Online Blood Bank Management System massage.php sql injectionEPSS 0.7%CVE-2025-3195MEDIUMitsourcecode Online Blood Bank Management System bbms.php sql injectionEPSS 0.6%