CVE-2024-0282 - Kashipara Food Management System addmaterialsubmit.php cross site scripting

Back Back to CVE browser

MEDIUM

Kashipara Food Management System addmaterialsubmit.php cross site scripting

Published Jan 7, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.87%

Description

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as problematic. This affects an unknown part of the file addmaterialsubmit.php. The manipulation of the argument tin leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249837 was assigned to this vulnerability.

Affected products

Vendor Kashipara Product Food Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Kashipara

Food Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16078
Advisory
https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%2014.pdf
exploitThird Party Advisory
https://vuldb.com/?ctiid.249837
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.249837
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16078		Advisory
https://github.com/E1CHO/cve_hub/blob/main/Food%20Management%20System/Food%20Management%20System%20-%20vuln%2014.pdf		exploitThird Party Advisory
https://vuldb.com/?ctiid.249837		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.249837		vdb-entrytechnical-descriptionThird Party Advisory