CVE-2024-9906: SourceCodester Online Eyewear Shop cross site scripting
First published: Sun Oct 13 2024(Updated: )
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/view_inventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Online Eyewear Shop | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-9906?
CVE-2024-9906 has been classified as problematic due to its potential for cross-site scripting attacks.
How does CVE-2024-9906 impact SourceCodester Online Eyewear Shop 1.0?
CVE-2024-9906 affects the /admin/?page=inventory/view_inventory component of SourceCodester Online Eyewear Shop 1.0 by allowing manipulation of the 'Code' argument.
How do I fix CVE-2024-9906?
To fix CVE-2024-9906, validate and sanitize user input in the affected functionalities to prevent cross-site scripting.
What type of vulnerability is CVE-2024-9906?
CVE-2024-9906 is a cross-site scripting (XSS) vulnerability.
Who is affected by CVE-2024-9906?
Users of SourceCodester Online Eyewear Shop version 1.0 are affected by CVE-2024-9906.
- agent/references
- agent/weakness
- agent/title
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/trending
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oretnom23
- canonical/sourcecodester online eyewear shop
- version/sourcecodester online eyewear shop/1.0