CVE-2024-9084: XSS in Code-Projects Blood Bank System 1.0

Key Information 1. Vulnerability ID: - VDB-278254 - CVE-2024-9084 2. Vulnerability Name: - Code-Projects Blood Bank System 1.0 BBMS.PHP Fullname/Age/Bloodgroup/City/Phno/Gender Cross Site Scripting 3. CVSS Meta Temp Score: - 5.2 4. Current Vulnerability Price: - $0-$5k 5. CTI Interest Score: - 3.59 6. Vulnerability Description: - This vulnerability exists in the file of Code-Projects Blood Bank System 1.0. By manipulating parameters such as , , , , , and as part of a string, a Cross-Site Scripting (XSS) attack can be triggered. - The CWE classification for this vulnerability is CWE-79. - The vulnerability arises from insufficient neutralization of user-supplied input, allowing the output to be reflected in web pages accessible to other users. - This vulnerability impacts integrity. 7. Vulnerability Impact: - Can be exploited remotely. - Publicly disclosed and potentially exploitable. 8. Vulnerability ID: - CVE-2024-9084 9. Vulnerability Type: - XSS (Cross-Site Scripting) 10. Exploit Difficulty: - Exploitation appears relatively easy. 11. Exploitation Requirements: - Successful exploitation requires user interaction. 12. Exploit Tools: - Public exploit tools are available. 13. Exploitation Method: - Targets can be identified by searching for . 14. Recommended Mitigation: - Replace affected components. 15. Related Vulnerabilities: - VDB-275772, VDB-275773, VDB-278272 Summary This vulnerability is a Cross-Site Scripting (XSS) flaw located in the file of Code-Projects Blood Bank System 1.0. By manipulating specific parameters, attackers can trigger XSS attacks, compromising the integrity of the system. The vulnerability has been publicly disclosed and may already be exploited. It is recommended to replace the affected components to mitigate the risk.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-9084: XSS in Code-Projects Blood Bank System 1.0