cl4irv0yance

3 exploits Active since Jul 2024
CVE-2024-7303 GITHUB LOW WRITEUP
Online Blood Bank Management System 1.0 - Cross-Site Scripting via Send Blood Request Page Address Parameter
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273185 was assigned to this vulnerability.
CVSS 3.5
CVE-2024-7320 GITHUB HIGH WRITEUP
Online Blood Bank Management System 1.0 - SQL Injection via Admin Login User Parameter
A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273231.
CVSS 7.3
CVE-2024-7321 GITHUB MEDIUM WRITEUP
Online Blood Bank Management System 1.0 - Cross-Site Scripting via User Registration Handler
A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273232.
CVSS 4.3