PT-2023-29263 · Unknown · Online Blood Donation Management System

Published 2023-10-31 · Updated 2024-01-02 · CVE-2023-44486

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Online Blood Donation Management System version 1.0

Description The issue concerns multiple Store Cross-Site Scripting vulnerabilities. The address parameter of the "users/register.php" endpoint is vulnerable, as its input is copied into the application's response without proper validation or sanitization.

Recommendations For Online Blood Donation Management System version 1.0, consider validating and sanitizing user input for the address parameter in the "users/register.php" endpoint to prevent Cross-Site Scripting attacks. As a temporary workaround, restrict access to the "users/register.php" endpoint until a proper fix is applied.

Exploit

Related Identifiers

CVE-2023-44486

Affected Products

Online Blood Donation Management System

References · 4

• 🔥 https://fluidattacks.com/advisories/carpenter · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-44486 · Security Note
• https://twitter.com/VulmonFeeds/status/1719511597893247336 · Twitter Post
• https://twitter.com/CVEnew/status/1719465369016885640 · Twitter Post