CVE-2024-5437: SourceCodester Simple Online Bidding System save_category cross site scripting
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as problematic. Affected is the function savecategory of the file /admin/index.php?page=categories. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-266442 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5437?
CVE-2024-5437 has been classified as problematic.
How do I fix CVE-2024-5437?
To fix CVE-2024-5437, ensure proper sanitization and validation of user input in the save_category function.
What type of vulnerability is CVE-2024-5437?
CVE-2024-5437 is a cross-site scripting (XSS) vulnerability.
Which software versions are affected by CVE-2024-5437?
CVE-2024-5437 affects version 1.0 of the Simple Online Bidding System by Oretnom23.
What is the attack vector for CVE-2024-5437?
The attack vector for CVE-2024-5437 involves the manipulation of the 'name' argument in the save_category function.