PT-2024-26906
CVE-2024-3612
·
تاريخ النشر
2024-04-10
·
تاريخ التحديث
2024-06-26
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SourceCodester Warehouse Management System version 1.0
Description
A vulnerability was found in the SourceCodester Warehouse Management System, affecting an unknown functionality of the file barang.php. The manipulation of the
nama barang/merek argument leads to cross-site scripting. The attack can be launched remotely.Recommendations
For SourceCodester Warehouse Management System version 1.0, consider restricting access to the barang.php file until a patch is available. As a temporary workaround, avoid using the
nama barang/merek argument in the affected functionality to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾