Description

A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/action/add_staff.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Related CPE's

a

mayurik

free_and_open_source_inventory_management_system

1.0

Vulnerable

References

https://hackmd.io/@SeaWind/rySx1IbR0

ExploitThird Party Advisory

https://vuldb.com/?ctiid.278827

Permissions Required

https://vuldb.com/?id.278827

Third Party Advisory

https://vuldb.com/?submit.413401

Third Party Advisory

https://www.sourcecodester.com/

Product

Weaknesses

[email protected]

Primary
CWE-79

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.4 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2024-09-29T07:15:02.260

1 week ago

Last modified

2024-10-01T12:55:17.873

1 week ago