CVE-2024-9323: SourceCodester Inventory Management System add_staff.php cross site scripting

Published Sep 29, 2024

Updated

A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/action/addstaff.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Mayurik Free And Open Source Inventory Management System=1.0

Event History

Sep 29, 2024

CVE Published

via MITRE·06:31 AM

Data Sourced

via MITRE·06:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-9323?

CVE-2024-9323 has been declared problematic due to its potential for exploitation through cross site scripting.

How do I fix CVE-2024-9323?

To fix CVE-2024-9323, you should sanitize and validate all user inputs in the add_staff.php file to prevent cross site scripting attacks.

What systems are affected by CVE-2024-9323?

CVE-2024-9323 affects version 1.0 of the Mayurik Free And Open Source Inventory Management System.

What type of vulnerability is CVE-2024-9323?

CVE-2024-9323 is a cross site scripting vulnerability.

Can CVE-2024-9323 lead to data theft?

Yes, successful exploitation of CVE-2024-9323 could enable attackers to execute scripts in the context of a user's session, potentially leading to data theft.