First published: Thu Apr 11 2024(Updated: )
A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument nama_customer/alamat_customer/notelp_customer leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260271.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
SourceCodester Warehouse Management System | ||
Oretnom23 Warehouse Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-3614 is classified as problematic due to its potential for cross site scripting exploits.
To fix CVE-2024-3614, input validation and sanitization for the parameters in customer.php should be implemented.
CVE-2024-3614 affects SourceCodester Warehouse Management System version 1.0.
CVE-2024-3614 facilitates cross site scripting attacks through unsanitized user input.
The components vulnerable in CVE-2024-3614 include the parameters nama_customer, alamat_customer, and notelp_customer in the file customer.php.