CVE-2024-7321: itsourcecode Online Blood Bank Management System User Registration signup.php cross site scripting
First published: Wed Jul 31 2024(Updated: )
A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273232.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adonesevangelista Online Blood Bank Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7321?
CVE-2024-7321 is classified as a problematic vulnerability.
How does CVE-2024-7321 affect the Online Blood Bank Management System?
CVE-2024-7321 affects the user registration handler in the signup.php file, potentially leading to cross-site scripting vulnerabilities.
Who is affected by CVE-2024-7321?
Users of Adonesevangelista's Online Blood Bank Management System version 1.0 are affected by CVE-2024-7321.
What are the potential risks associated with CVE-2024-7321?
The manipulative cross-site scripting enabled by CVE-2024-7321 can lead to data theft and session hijacking.
How can I mitigate the risks of CVE-2024-7321?
To mitigate CVE-2024-7321, sanitize user inputs in the signup.php file and implement proper output encoding.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/adonesevangelista
- canonical/adonesevangelista online blood bank management system
- version/adonesevangelista online blood bank management system/1.0