Reflected XSS in SourceCodester Hospital Management System 1.0 (CVE-2024-11102)

Key Information 1. Vulnerability ID: - VDB-283922 - CVE-2024-11102 2. Affected Product: - SourceCodester Hospital Management System 1.0 3. Affected File: - /vm/doctor/edit-doc.php 4. Vulnerability Type: - Name Cross Site Scripting (XSS) 5. CVSS Meta Temp Score: - 3.3 6. Current Exploit Price: - $0-$5k 7. CTI Interest Score: - 0.27 8. Vulnerability Description: - The vulnerability exists in the file /vm/doctor/edit-doc.php, where the parameter and unknown input lead to a Cross-Site Scripting (XSS) attack via an unspecified functionality. The product fails to properly neutralize or incorrectly neutralizes user-controllable input, resulting in output being rendered in web pages and delivered to other users. This impacts integrity. 9. Exploitability: - Can be exploited remotely. - Successful exploitation requires user interaction. - Known technical details and public exploits available. 10. Exploit Links: - github.com - drive.google.com 11. Exploitation Method: - Vulnerable targets can be identified by searching for . 12. Recommended Mitigation: - Replace the affected component. 13. Related Vulnerability IDs: - VDB-282290, VDB-282989, VDB-283087, VDB-283309 Summary This vulnerability resides in the file of SourceCodester Hospital Management System 1.0, leading to a Cross-Site Scripting (XSS) attack. Exploitation is straightforward, with vulnerable targets discoverable via public exploit links. It is recommended to replace the affected component to mitigate further security risks.

Goal Reached Thanks to every supporter — we hit 100%!

Reflected XSS in SourceCodester Hospital Management System 1.0 (CVE-2024-11102)