Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Pijiawei

#42866of 53,633
6.1Total CVSS
Vulnerabilities · 1
PT-2024-36256
6.1
2024-05-28
Sourcecodester · Sourcecodester Simple Online Bidding System · CVE-2024-5437
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A problematic issue was found in the function `save category` of the file /admin/index.php?page=categories, where the manipulation of the argument `name` leads to cross-site scripting. This issue can be exploited remotely. Recommendations: For SourceCodester Simple Online Bidding System version 1.0, consider disabling the `save category` function in the /admin/index.php?page=categories file until a patch is available to prevent cross-site scripting attacks. Restrict access to the /admin/index.php?page=categories endpoint to minimize the risk of exploitation. Avoid using the `name` argument in the affected function until the issue is resolved.