CVE-2024-11677: CodeAstro Hospital Management System Add Vendor Details Page his_admin_add_vendor.php cross site scripting
A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /backend/admin/hisadminaddvendor.php of the component Add Vendor Details Page. The manipulation of the argument vname/vadr/vnumber/vemail/vphone/vdesc leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11677?
CVE-2024-11677 has been classified as a problematic vulnerability, indicating significant risk.
How do I fix CVE-2024-11677?
To mitigate CVE-2024-11677, ensure proper validation and sanitization of input fields in the Add Vendor Details Page.
What component is affected by CVE-2024-11677?
CVE-2024-11677 affects the Add Vendor Details Page in CodeAstro Hospital Management System version 1.0.
What type of vulnerability is identified in CVE-2024-11677?
CVE-2024-11677 is categorized as a problematic vulnerability that may lead to potential exploitation.
What could an attacker achieve by exploiting CVE-2024-11677?
Exploiting CVE-2024-11677 could allow an attacker to manipulate vendor details due to insufficient input validation.