CVE-2024-11246: code-projects Farmacia adicionar-cliente.php cross site scripting

Published Nov 15, 2024

Updated

A vulnerability, which was classified as problematic, was found in code-projects Farmacia 1.0. Affected is an unknown function of the file /adicionar-cliente.php. The manipulation of the argument nome/cpf/dataNascimento leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions the parameter "nome" to be affected. But further inspection indicates that other parameters might be affected as well.

Affected Software

1 affected component

Anisha Farmacia=1.0

Event History

Nov 15, 2024

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-11246?

CVE-2024-11246 is classified as problematic due to its potential for cross site scripting attacks.

How do I fix CVE-2024-11246?

To fix CVE-2024-11246, ensure proper sanitization and validation of inputs in the /adicionar-cliente.php file.

What software is affected by CVE-2024-11246?

CVE-2024-11246 affects Anisha Farmacia version 1.0.

What type of vulnerability is CVE-2024-11246?

CVE-2024-11246 is a cross site scripting vulnerability.

Can CVE-2024-11246 be exploited remotely?

Yes, CVE-2024-11246 can be exploited remotely by manipulating the parameters in the affected PHP file.